Project Role Security Architect Project Role Description Define the cloud security framework and architecture ensuring it meets the business requirements and performance goals Document the implementation of the cloud security controls and transition to cloud security-managed operations Must have skills Security Information and Event Management SIEM Good to have skills NA Minimum 5 year s of experience is required Educational Qualification 15 years full time education Summary As the IR L3 analyst in 24x7 SOC you will be the escalation point for all complex and high severity security incidents and lead the technical handling of critical security incidents You ll be responsible for deep-dive analysis root cause investigation forensics and containment using tools such as Sentinal One Splunk SIEM This role requires deep expertise in detection investigation containment and remediation as well as collaboration with multiple teams across security IT and compliance Roles Responsibilities -End-to-End Incident Response Ownership Ability to handle incident lifecycle detect contain remediate -Subject matter expert for handling the escalated high critical or actual true positive incidents -Identify opportunities for automation and work with SIEM Platform Support team for implementing it -EDR Deep Dive Using Real Time Response RTR Threat Graph custom IOA rules -Proficiency in writing SPL queries dashboards correlation rules and tuning use cases -Threat Hunting Behavior-based detection using TTPs -Deep understanding of malware lateral movement privilege escalation and exfiltration patterns -Threat Intel Integration Automation of IOC lookups and enrichment flows -Forensic Skills Live host forensics log correlation malware behavioral analysis -Deep experience in advanced threat detection and incident response -Scripting Proficiency Python PowerShell Bash for automation or ETL -Proficiency in Sentinal One forensic and incident response capabilities -Playbook Development Able to define update and optimize IR playbooks and workflows -Red team purple team exposure -Forensic analysis memory file systems logs -Cloud incident handling AWS Azure -Dashboarding Advanced visualizations and business-focused metrics in Splunk -Certifications Splunk Certified Admin ES Admin SC-200 or SOAR Sentinal One EDR vendor training Professional Technical Skills -Lead high-severity incident response coordinating with stakeholders and IT teams -Perform endpoint forensic triage using Sentinal One -Conduct detailed log analysis and anomaly detection in Splunk -Perform log correlation in Splunk to trace attack patterns scope and impact -Conduct deep-dive analysis into suspicious behaviors using SPL and custom dashboards -Use endpoint data network logs and threat intel to drive full-lifecycle incident handling -Isolate affected systems coordinate containment with IT and oversee recovery steps -Recommend and define automated workflows for triage enrichment and response -Perform root cause analysis and support RCA documentation -Create or optimize Splunk detection logic to improve fidelity and coverage -Mentor L1 and L2 analysts through case walk-throughs and knowledge sharing -Generate post-incident reports and present findings to leadership -Lead investigations and coordinate response for major incidents -Perform root cause analysis and post-incident reviews -Participating in continuous improvement initiatives -Conduct playbook testing version control and change documentation -Contribute to executive-level reports RCA documents and compliance metrics -Sentinal One Custom detections forensic triage threat graphs -Splunk SIEM core ES module Rule optimization anomaly detection ATT CK mapping -Threat Intelligence TTP mapping behavioral correlation -Scripting Python regex shell scripting for ETL workflows -Incident Response and Forensics SME Additional Information - The candidate should have minimum 5 years of experience in Security Information and Event Management SIEM - This position is based at our Bengaluru office - A 15 years full time education is required 15 years full time education About Accenture We work with one shared purpose to deliver on the promise of technology and human ingenuity Every day more than 775 000 of us help our stakeholders continuously reinvent Together we drive positive change and deliver value to our clients partners shareholders communities and each other We believe that delivering value requires innovation and innovation thrives in an inclusive and diverse setting We actively foster a workplace free from bias where everyone feels a sense of belonging and is respected and empowered to do their best work At Accenture we see well-being holistically supporting our people s physical mental and financial health We also provide opportunities to keep skills relevant through certifications learning and diverse work experiences We re proud to be consistently recognized as one of the World s Best Workplaces TM Join Accenture to work at the heart of change Visit us at Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences All employment decisions shall be made without regard to age race creed color religion sex national origin ancestry disability status military veteran status sexual orientation gender identity or expression genetic information marital status citizenship status or any other basis as protected by applicable law Our rich diversity makes us more innovative more competitive and more creative which helps us better serve our clients and our communities