Security Architect

Accenture PLC; Hyderabad; On-site; INR 1,800,000 - 2,900,000; Full time

Job summary

Accenture PLC is seeking a Security Architect to define cloud security framework and architecture, and document the implementation of cloud security controls. Based in Hyderabad, you will transition to cloud security-managed operations.

The ideal candidate has 7.5+ years of SIEM-focused experience, with hands-on work on Sentinel One and Splunk SIEM, and a strong background in incident response, automation, and threat hunting.

Qualifications

• Minimum 7.5 years of experience in Security Information and Event Management (SIEM).
• 15 years full time education required.

Responsibilities

• Alert Triage & Investigation: Experience investigating escalated alerts using SIEM or EDR
• Incident Response and Containment: Take necessary actions to contain, eradicate and recover from security incidents.
• Identify opportunities for automation and work with SIEM Platform Support team for implementing it.
• EDR Deep Dive: Using Real Time Response (RTR), Threat Graph, custom IOA rules
• Proficiency in writing SPL queries, dashboards and providing fine tuning opportunities
• Threat Hunting: Behavior-based detection using TTPs
• Good understanding of malware, lateral movement, privilege escalation, and exfiltration patterns
• Threat Intel Integration: Automation of IOC lookups and enrichment flows
• Forensic Skills: Live host forensics, log correlation, malware behavioral analysis
• Good experience in advanced threat detection and incident response
• Proficiency in Sentinal One forensic and incident response capabilities
• Playbook Development/Updation: Able to define, update, and optimize IR playbooks and workflows

Skills

SIEM

Education

15 years full time education

Tools

Splunk SIEM

Sentinel One

SOAR

Job description

Project Role :

Security Architect

Project Role Description :

Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills :

Security Information and Event Management (SIEM)

Good to have skills :

NA

Minimum 7.5 year(s) of experience is required

Educational Qualification :

15 years full time education

Summary:

As a Level 3 SOC Analyst, your role involves deeper investigation of security alerts and confirmed incidents. You will validate escalated events using Sentinal One and Splunk SIEM, enrich them with context, and work closely in containment and timely remediation. You will also assist in improving detection fidelity and supporting SOAR automation. This role requires deep expertise in detection, investigation, containment, and remediation, as well as collaboration with multiple teams across security, IT, and compliance.

Roles & Responsibilities:

• Alert Triage & Investigation: Experience investigating escalated alerts using SIEM or EDR
• Incident Response and Containment: Take necessary actions to contain, eradicate and recover from security incidents.
• Identify opportunities for automation and work with SIEM Platform Support team for implementing it.
• EDR Deep Dive: Using Real Time Response (RTR), Threat Graph, custom IOA rules
• Proficiency in writing SPL queries, dashboards and providing fine tuning opportunities
• Threat Hunting: Behavior-based detection using TTPs
• Good understanding of malware, lateral movement, privilege escalation, and exfiltration patterns
• Threat Intel Integration: Automation of IOC lookups and enrichment flows
• Forensic Skills: Live host forensics, log correlation, malware behavioral analysis
• Good experience in advanced threat detection and incident response
• Proficiency in Sentinal One forensic and incident response capabilities
• Playbook Development/Updation: Able to define, update, and optimize IR playbooks and workflows

Professional & Technical Skills:

• Investigate alerts escalated by L2 to determine scope, impact, and root cause
• Perform in-depth endpoint and network triage using Sentinel One
• Use Sentinel One to perform endpoint analysis and threat validation
• Correlate multiple log sources in Splunk to trace attacker activity
• Execute or verify SOAR playbooks for containment actions (isolate host, disable user)
• Enrich events with asset, identity, and threat intelligence context
• Document investigation workflows, evidence, and final conclusions
• Support major incidents by performing log or memory triage
• Suggest improvements in alert logic or SOAR workflow to reduce false positives
• Conduct threat research aligned to alert patterns and business context
• Enhance alert fidelity with threat intel and historical context
• Document investigation findings and communicate with stakeholders
• Sentinal One: Custom detections, forensic triage, threat graphs
• Splunk SIEM (core + ES module): Searching Logs, Monitoring and investigating alerts.

Additional Information:

• The candidate should have minimum 7.5 years of experience in Security Information and Event Management (SIEM).
• This position is based at our Hyderabad office.
• A 15 years full time education is required. 15 years full time education

Important Notice

We have been alerted to the existence of fraudulent messages asking job seekers to set up payment to cover various costs associated with establishing employment at Accenture. No one is ever required to pay for employment at Accenture. If you are contacted by someone asking for payment, please do not respond, and contact us at [e-mail] immediately.

Equal Employment Opportunity Statement

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Please read Accenture's Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.