You Are

A highly experienced cyber threat intelligence professional with direct operational experience in underground environments. You bring both technical depth and leadership capability, with a proven ability to collect intelligence firsthand and translate it into actionable insight. You operate with strong discipline, discretion, and a commitment to protecting long-term access and operational integrity.

The Work

You will lead and contribute to Accenture’s dark web and underground intelligence collection capability. This includes persona-based collection, monitoring criminal ecosystems, and producing actionable intelligence for operational teams.

Key responsibilities include:

• Executing persona-based access and intelligence collection within criminal forums and marketplaces

• Monitoring ransomware leak sites, Initial Access Broker (IAB) activity, and underground ecosystem trends

• Producing intelligence reporting derived from firsthand collection activities

• Developing and executing collection requirements aligned to stakeholder needs

• Evaluating source credibility and validating claims within underground environments

• Maintaining secure persona infrastructure and anonymized collection environments

• Mentoring junior analysts and supporting persona development lifecycle

• Partnering with legal and compliance stakeholders to ensure adherence to collection authorities

• Delivering briefings to senior stakeholders while protecting sensitive collection methodologies

Travel may be required for this role.  The amount of travel will vary from 0 to 100% depending on business need and client requirements.

Here's what you need

• Minimum 7 years of professional experience in cyber threat intelligence (CTI), cybercrime investigations (law enforcement), or intelligence community equivalent

• Minimum 3 years of hands-on experience conducting direct dark web or underground collection, including active engagement in forums or marketplaces

• Minimum 3 years of hands-on experience with at least two of the following platforms: Flashpoint, Intel 471, Cybersixgill, Recorded Future

• Minimum 1 year of experience leading, mentoring, or supervising analysts, including tasking and reviewing analytical output

• At least 12 months of experience operating one or more personas within restricted or criminal online communities

• Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)

Professional Skill Requirements

• Demonstrated experience producing original intelligence reporting based on firsthand collection, with at least 5–10 completed intelligence products (e.g., reports, alerts, briefings)

Bonus points if you have

• Practical experience accessing and collecting intelligence via TOR, I2P, or comparable anonymization networks

• Experience building or maintaining secure persona infrastructure, including virtual machines, VPN/proxy chaining, and compartmented digital identities

• Experience with structured or semi-automated data collection methods, including forum scraping, data extraction tools, or indexing workflows

• Demonstrated familiarity with ransomware ecosystems, including tracking ransomware groups or leak sites

• Demonstrated familiarity with cybercriminal ecosystem components, including forums, marketplaces, or Initial Access Broker (IAB) communities

• Experience contributing to or supporting intelligence requirements development or collection planning processes

• Deep understanding of criminal underground ecosystems and actor behaviors

• Ability to assess source credibility, persona trust dynamics, and claim validation

• Familiarity with cryptocurrency tracing concepts

• Understanding of relationships between cybercrime and APT activity

• Strong operational security (OPSEC) discipline

• Experience working with legal and compliance teams on collection governance

• Demonstrated discretion in handling sensitive intelligence operations

• Ability to translate complex underground activity into clear, executive-level reporting

• Experience briefing senior leadership while protecting sensitive sources and methods

• Experience mentoring junior analysts through persona development lifecycle

• Strong written communication across both short-form alerts and long-form reporting

Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below.
We anticipate this job posting will be posted until 11/30/2026.

Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here:

Role LocationAnnual Salary Range

California$94,400 to $293,800

Colorado$94,400 to $253,800

Connecticut$94,400 to $253,800

District of Columbia$100,500 to $270,300

Illinois$87,400 to $253,800

Maine$80,400 to $216,200

Maryland$94,400 to $253,800

Massachusetts$94,400 to $270,300

Minnesota$94,400 to $253,800

New York$87,400 to $293,800

New Jersey$100,500 to $293,800

Ohio$87,400 to $235,000

Virginia$87,400 to $270,300

Washington$100,500 to $270,300