Investigator – Cyber Incident Response
Location: Flexible (UK)
Security Clearance Note: Due to the nature of client work you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address history at the point of application.
As part of our global Incident Response team, you’ll help organisations investigate, contain, and recover from the full spectrum of cyber incidents, from sophisticated intrusions to complex fraud and ransomware. Between high‑intensity engagements you’ll work proactively with clients, running tabletop exercises, purple‑team operations, playbook development, and helping them build resilience before the next crisis strikes. You’ll collaborate closely with experts in forensics, threat intelligence, and crisis management.
Qualifications
* Understand what an attack looks like, both on hosts and across the network.
* Can think like an attacker and spot how lateral movement happens.
* Build labs, experiment, break things.
* Know or use frameworks such as MITRE ATT&CK and focus on TTPs, not just tools.
* Have seen what a “bad day” looks like in an incident, and still want more.
What You’ll Get
* Access to world‑class training and tools, and a global network of experts to learn from.
* Variety: you’ll move between crisis work, proactive resilience, and strategic recovery.
* The chance to make a real difference; sometimes even save lives.
* A supportive, welfare‑focused culture that understands the demands of the job.
Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners.
Locations
* London
* Birmingham
* Bristol
* Edinburgh
* Glasgow
* Manchester
Closing Date for Applications: 31/01/2026
Accenture reserves the right to close the role prior to this date should a suitable applicant be found.
Accenture is an equal opportunities employer and welcomes applications from all sections of society and does not discriminate on grounds of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, or any other basis as protected by applicable law.
Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.
#J-18808-Ljbffr