Cyber Defense Forensics (CDF) Lead

<div class="content-intro"><div> <div>&nbsp;</div> <div>At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.&nbsp;</div> <div>&nbsp;</div> <div>Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.&nbsp;</div> <div>&nbsp;</div> <div>Join us to drive positive, lasting change that moves missions and the government forward!</div> <div>&nbsp;</div> </div></div><p>We are seeking a&nbsp;Cyber Defense Forensics Lead&nbsp;to oversee forensics and insider threat operations for our customer. You will lead a team of analysts conducting digital forensic investigations, monitoring data loss, and analyzing insider threats. This role requires expertise in forensic tools, incident response, and managing complex investigations.</p> <p>Key Responsibilities:</p> <ul> <li>Lead the CDF team in supporting insider threat operations, DLP monitoring, and policy violation investigations.</li> <li>Conduct forensic analysis of Windows, Linux, Mac, and cloud systems.</li> <li>Maintain and modernize the client’s SOC forensics lab.</li> <li>Manage CDF investigations, documenting findings and escalating cases as needed.</li> <li>Serve as an SME in evidence preservation, chain of custody, and malware analysis.</li> <li>Develop insider threat dashboards, reports, and workflows.</li> </ul> <p><strong>Basic Qualifications:</strong></p> <ul> <li>7+ years of overall cybersecurity experience</li> <li>5+ years of hands-on experience with host/network security monitoring, forensic tools, SIEM platforms, and endpoint threat detection.</li> <li>Certifications such as GCFA, GCFE, CCFP, CISM, or CISSP are highly desirable.</li> </ul> <p><strong>Preferred Skills:</strong></p> <ul> <li>Experience working with federal or law enforcement agencies.</li> <li>Familiarity with CBP operations or similar government entities.</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p>&nbsp;</p> <p><span class="TextRun SCX