Join Accenture and help transform leading organizations and communities around the world. The sheer scale of our capabilities and client engagements and the way we collaborate, operate and deliver value provides an unparalleled opportunity to grow and advance. Choose Accenture, and make delivering innovative work part of your extraordinary career
Why Accenture join Accenture’s Security practice?
Serving as a trusted security partner for more than 20 years to more than 330 clients across ~70 countries, Accenture Security helps organizations build resilience from the inside out so they can operate and grow confidently in a rapidly evolving threat landscape. Our 9000 security professionals bring exceptional industry expertise to tailor intelligent security services to our clients’ unique businesses and industries. We provide a full spectrum of services - from security strategy development, to business transformation to managed security services - on demand and at a global scale.
Accenture’s unique ability to combine deep Security expertise across Strategy, Technology and Operations means that it can offer clients an enterprise-wide security program to predict, protect, detect, and respond to threats in an industry specific context.
As part of Accenture’s Managed Security Services, we manage, maintain and enhance global cybersecurity operations’ capabilities to detect, proactively hunt for and respond to advanced cyberattacks. Specific offerings include security monitoring; threat intelligence; managed detection & response (MDR); security tools & infrastructure management; managed hunting & response; and vulnerability management.
• *Responsibilities**:
- Analysis and support: Take necessary actions on complex incidents escalated by the Level 1 team.
- Perform detailed analysis, triage and escalation of detected events from Level 1
- Provide support to Level 3 as needed
- Support use case enrichment and log source integration activities
- Monitor SIEM health checks
- Support tuning and optimization of the SIEM use cases
- Define manual/automated incident management process leveraging ticketing tool
- Validate processes to categorize, document, measures and report security incidents
- Manage requests submitted by client to the team
• *Basic Qualifications**:
- Must be in possession of, or qualify for, federal government security clearance.
- 2+ years of experience with security monitoring platforms and of analysis of incidents and events
- 2+ years of experience working with security tools eg SIEM, ticketing systems, additionally-firewalls, IDS, endpoint protection, content filtering, IAM, DLP
- 2+ years of experience working with security operations center (e.g. incident response, security infrastructure management or monitoring services)
- 2+ years of experience working with security tools performing health checks, use case configuration, and maintaining operations, content development
- Bilingual (French/English) preferred
- Proven success in contributing to a team-oriented environment
- Proven ability to work creatively and analytically in a problem-solving environment
- Excellent communication (written and oral) and interpersonal skills
- English is required for this position as this role will regularly interact with stakeholders across Canada, US and other countries across our Global footprint where English is the common language.