10 Aug
|
Accenture in India
|
Gurugram
10 Aug
Accenture in India
Gurugram
Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Information and Event Management (SIEM)
Positive to have skills : NA
Minimum 5 Year(s) Of Experience Is Required
Educational Qualification : 15 years full time education
Summary:
As the IR L3 analyst in 24x7 SOC, you will be the escalation point for all complex and high severity security incidents and lead the technical handling of critical security incidents. You ll be responsible for deep-dive analysis, root cause investigation, forensics, and containment using tools such as Sentinal One, Splunk SIEM. This role requires deep expertise in detection, investigation, containment, and remediation, as well as collaboration with multiple teams across security, IT, and compliance.
Roles & Responsibilities:
End-to-End Incident Response Ownership:
Ability to handle incident lifecycle (detect, contain, remediate)
Subject matter expert for handling the escalated high, critical or actual true positive incidents.
Identify opportunities for automation and work with SIEM Platform Support team for implementing it.
EDR Deep Dive: Using Real Time Response (RTR), Threat Graph, custom IOA rules
Proficiency in writing SPL queries, dashboards, correlation rules, and tuning use cases
Threat Hunting: Behavior-based detection using TTPs
Deep understanding of malware, lateral movement, privilege escalation, and exfiltration patterns
Threat Intel Integration: Automation of IOC lookups and enrichment flows
Forensic Skills: Live host forensics, log correlation, malware behavioral analysis
Deep experience in advanced threat detection and incident response
Scripting Proficiency: Python, PowerShell, Bash for automation or ETL
Proficiency in Sentinal One forensic and incident
📌 Security Architect (Gurugram)
🏢 Accenture in India
📍 Gurugram