CronJobs

security jobs

Cyber Defense Forensics (CDF) Lead

Accenturefederalservices · Arlington, VA

unknownlead$116,900–$116,900Posted Oct 7, 2026WindowsLinuxmacOSSIEMDLPIncident ResponseMalware Analysis

Apply on the employer site

About this role

**Cyber Defense Forensics (CDF) Lead** At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer. We are seeking a **Cyber Defense Forensics Lead** to oversee forensics and insider threat operations for our customer. You will lead a team of analysts conducting digital forensic investigations, monitoring data loss, and analyzing insider threats. This role requires expertise in forensic tools, incident response, and managing complex investigations. **Key Responsibilities** - Lead the CDF team in supporting insider threat operations, DLP monitoring, and policy violation investigations. - Conduct forensic analysis of **Windows, Linux, Mac, and cloud** systems. - Maintain and modernize the client’s **SOC forensics lab**. - Manage CDF investigations, documenting findings and escalating cases as needed. - Serve as an SME in **evidence preservation, chain of custody, and malware analysis**. - Develop insider threat **dashboards, reports, and workflows**. **Basic Qualifications** - **7+ years** of overall cybersecurity experience - **5+ years** hands-on experience with host/network security monitoring, forensic tools, SIEM platforms, and endpoint threat detection - Certifications such as **GCFA, GCFE, CCFP, CISM, or CISSP** are highly desirable **Preferred Skills** - Experience working with **federal or law enforcement agencies** - Familiarity with **CBP operations** or similar government entities **Compensation (Base Pay Range)** - **$116,900 — $243,100 USD** (for the listed locations: CA, CO, CT, HI, IL, ME, MD, MA, MN, NJ, NY, OH, VT, VA, WA, and DC) *Accenture Federal Services accepts applications on an ongoing basis; there is no fixed deadline to apply.*

Listing freshness

CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.

Browse all software engineering jobs →

Follow fresh jobs in Discord