Investigator - Cyber Incident Response in London

Location: Flexible (UK)

Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address history at the point of application.

If you’re looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this is the role for you. As part of our global team, you'll be working with cutting-edge technologies and will have the opportunity to develop a wide range of new skills.

At Accenture, our global Incident Response team takes on some of the hardest and most meaningful challenges in cyber security. When major organisations are breached, when ransomware hits the headlines, when espionage or insider threats threaten operations, we’re the people called to help.

We’re looking for curious, capable people who love solving complex problems under pressure, thrive on collaboration, and want to work with the best in the industry.

Who We Are

We’re a globally distributed team of nearly 200 dedicated incident responders, forensics specialists, and crisis managers spread across more than 25 countries. Every day, we work across time zones, cultures, and languages to protect clients that range from household brands to nationally significant infrastructure.

You’ll be joining a small team but backed by the scale and reach of Accenture - meaning you’ll always have the opportunity to grow, specialise, or even work in a different part of the world.

What You’ll Do

You’ll help organisations investigate, contain, and recover from the full spectrum of cyber incidents, from sophisticated intrusions to complex fraud and ransomware. Between high-intensity engagements, you’ll also get to work proactively with clients, running tabletop exercises, purple-team operations, playbook development, and helping them build resilience before the next crisis strikes. You’ll collaborate closely with brilliant minds in forensics, threat intelligence, and crisis management, all working together to help clients make the right decisions in the toughest moments.

The following skills and experience are essential for this role:

• Understand what an attack looks like, both on hosts and across the network.
• Can think like an attacker and spot how lateral movement happens.
• Build labs, experiment, break things.
• Know or use frameworks like MITRE ATT&CK and care about TTPs, not just tools.
• Have seen what a “bad day” looks like in an incident, and still want more.

Formal qualifications are great, but curiosity and practical experience count for more. Whether you’ve come up through traditional routes or through your own self-taught path, we’re interested in how you’ve learned and how you apply it. Certifications are welcome, but so is evidence that you’ve used training to improve how you work or to strengthen your team.

What You’ll Get

• Access to world-class training and tools, and a global network of experts to learn from.
• Variety: you’ll move between crisis work, proactive resilience, and strategic recovery.
• The chance to make a real difference; sometimes even save lives.
• A supportive, welfare-focused culture that understands the demands of the job.

Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first-class services we are known for.