Cloud Security Operations Analyst

Accenture; Porto; Híbrido; EUR 40 000 - 58 000; Tempo integral

Resumo da oferta

A Accenture CyberSecurity está à procura de um Analista de Operações de Segurança em Cloud para monitorizar, investigar e responder a ameaças em ambientes Kubernetes e cloud-native.

Vais trabalhar na equipa de Security Transformation, com foco em Sysdig CNAPP, automação e melhoria contínua de deteção, incluindo gestão de incidentes, triagem de alertas e resposta a incidências de produção em ambientes empresariais. É exigida disponibilidade para on-call e viagens ocasionais pela Europa.

Qualificações

• Mínimo de 3 anos em Security Operations, Cloud Security ou SOC.
• Experiência prática com Sysdig CNAPP/Sysdig Secure.
• Conhecimento de Kubernetes e segurança em cloud-native.
• Experiência em gestão de vulnerabilidades, resposta a incidentes e remediation.
• Conhecimento de NGFWs, WAFs e ferramentas de monitorização.
• Experiência com sistemas de incident management e ticketing.
• Capacidade analítica, resolução de problemas.
• Experiência em ambientes de produção com serviços críticos.
• Scripting/Automação (Python, Bash, Terraform).
• Fluente em Inglês (C1 ou superior).

Responsabilidades

• Monitorizar a segurança de runtime do Kubernetes em ambientes corporativos.
• Investigar, triagear e responder a alertas de segurança.
• Analisar e otimizar regras de deteção para reduzir falsos positivos.
• Escalar incidentes para equipas de Aplicação, Platforma e Infraestrutura com orientações de remediação.
• Monitorizar eventos de NGFW/WAF e apoiar atividades de resposta a incidentes.
• Identificar, analisar e relatar violações de políticas, más configurações e deriva de configuração.
• Coordenar esforços de remediação para resolução tempestiva.
• Gerir incidentes de segurança ao longo de todo o ciclo de vida.
• Produzir relatórios operacionais, métricas de segurança e resumos para stakeholders.
• Manter runbooks e documentação operacional.
• Opor oportunidades de automação e auto-remediação futura.
• Colaborar com equipas de Security, Platform e Infraestrutura para melhorar operações na cloud.
• Participar em rotações de on-call e responder a incidentes de produção críticos.

Conhecimentos

Operações de segurança em cloud

Segurança em Kubernetes

Resposta a incidentes

Gestão de vulnerabilidades

NGFWs/WAFs

Sistemas de ticketing

Scripting (Python/Bash/Terraform)

Inglês (C1+)

Ferramentas

Sysdig CNAPP

Sysdig Secure

Kubernetes

Terraform

Python

Bash

Descrição da oferta de emprego

Descrição do cargo

Accenture CyberSecurity helps organizations prepare, protect, detect, respond and recover across all aspects of the security lifecycle. Cybersecurity challenges are different for every business and industry. Leveraging our global resources and advanced technologies, we create integrated, end-to-end solutions tailored to our clients' needs across their entire value chain, helping them build cyber resilience and grow with confidence.

We are seeking a highly qualified professional to join our team as a Cloud Security Operations Analyst.

As an essential part of our Security Transformation team, you will be responsible for monitoring, investigating, and responding to cloud-native security threats across enterprise environments.

We are looking for a professional with strong expertise in Cloud Security Operations, Kubernetes security, and incident response, with hands-on experience in Sysdig CNAPP and cloud-native technologies.

Qualificações

• Minimum of 3 years of experience in Security Operations, Cloud Security, or SOC environments
• Hands-on experience with Sysdig CNAPP / Sysdig Secure for security monitoring, alert triage, and incident investigation
• Strong understanding of Kubernetes, containers, and cloud-native security concepts
• Experience with vulnerability management, incident response, and remediation processes
• Knowledge of Next-Generation Firewalls (NGFWs), Web Application Firewalls (WAFs), and security monitoring tools
• Experience working with incident management and ticketing systems
• Strong analytical, troubleshooting, and problem-solving skills
• Experience operating in production environments with critical business services
• Experience with scripting and automation using Python, Bash, or Terraform
• Fluent in English (C1 or above), with excellent written and verbal communication skills

Responsabilidades

• Monitor Kubernetes runtime security across enterprise containerized environments using Sysdig CNAPP
• Investigate, triage, and respond to security alerts affecting containers, pods, and namespaces
• Analyze and optimize runtime detection rules to improve alert quality and reduce false positives
• Escalate security incidents to Application, Platform, and Infrastructure teams, providing remediation guidance and technical recommendations
• Monitor NGFW and WAF security events and support incident response activities
• Identify, analyze, and report security policy violations, misconfigurations, and configuration drift
• Coordinate remediation efforts to ensure timely resolution of identified security risks
• Manage security incidents throughout the full lifecycle, from detection to remediation and closure
• Produce operational reports, security metrics, and activity summaries for internal stakeholders
• Maintain runbooks, technical documentation, and operational procedures
• Identify opportunities for automation and future auto-remediation capabilities
• Collaborate with Security, Platform, and Infrastructure teams to enhance cloud-native security operations and runtime protection
• Participate in on-call support rotations and respond to critical production security incidents

Nice to Have

• Google Cloud Associate Cloud Engineer certification
• Kubernetes certifications such as KCNA, CKA, or CKS
• Sysdig Certified Security Analyst certification

Informações Adicionais

Location: Porto (Hybrid)

On-Call Requirement: Participation in an on-call rotation is required to support critical security incidents outside business hours

Travel: Flexibility for occasional travel across Europe for project deliveries and client meetings is required. It's mandatory 3 days on Alfragide office.