Project Role Security Architect Project Role Description Define the cloud security framework and architecture ensuring it meets the business requirements and performance goals Document the implementation of the cloud security controls and transition to cloud security-managed operations Must have skills Security Information and Event Management SIEM Good to have skills NA Minimum 3 year s of experience is required Educational Qualification 15 years full time education Summary As a Level 2 SOC Analyst your role involves deeper investigation of security alerts and confirmed incidents You will validate escalated events using Sentinal One and Splunk SIEM enrich them with context and work closely with L3 analysts to assist in containment and timely remediation You will also assist in improving detection fidelity and supporting SOAR automation This role requires deep expertise in detection investigation containment and remediation as well as collaboration with multiple teams across security IT and compliance Roles Responsibilities - Investigate alerts escalated by L1 to determine scope impact and root cause - Perform in-depth endpoint and network triage using Sentinel One - Use Sentinel One to perform endpoint analysis and threat validation - Correlate multiple log sources in Splunk to trace attacker activity - Execute or verify SOAR playbooks for containment actions isolate host disable user - Enrich events with asset identity and threat intelligence context - Document investigation workflows evidence and final conclusions - Support L3 during major incidents by performing log or memory triage - Suggest improvements in alert logic or SOAR workflow to reduce false positives - Conduct threat research aligned to alert patterns and business context - Enhance alert fidelity with threat intel and historical context - Document investigation findings and communicate with stakeholders Professional Technical Skills - Sentinal One Custom detections forensic triage threat graphs - Splunk SIEM core ES module Searching Logs Monitoring and investigating alerts - Alert Triage Investigation Experience investigating escalated alerts using SIEM or EDR - Incident Response and Containment Take necessary actions to contain eradicate and recover from security incidents - Identify opportunities for automation and work with SIEM Platform Support team for implementing it - EDR Deep Dive Using Real Time Response RTR Threat Graph custom IOA rules - Proficiency in writing SPL queries dashboards and providing fine tuning opportunities - Threat Hunting Behavior-based detection using TTPs - Valuable understanding of malware lateral movement privilege escalation and exfiltration patterns - Threat Intel Integration Automation of IOC lookups and enrichment flows - Forensic Skills Live host forensics log correlation malware behavioral analysis - Good experience in advanced threat detection and incident response - Proficiency in Sentinal One forensic and incident response capabilities - Playbook Development Updation Able to define update and optimize IR playbooks and workflows - Forensic analysis memory file systems logs - Cloud incident handling AWS Azure - Dashboarding Advanced visualizations and business-focused metrics in Splunk - Certifications Splunk Certified Admin ES Admin SC-200 Sentinal One EDR vendor training - Incident Response and SIEM Additional Information - The candidate should have minimum 4 years in SOC IR including 2 in IR L2 role Experience in 24x7 environments shift-based operations or critical infrastructure response - This position is based at our Bengaluru office - A 15 years full time education is required - Bachelors in IT Cybersecurity advanced certifications CISSP Splunk Certified Admin ES admin EDR Certification like Sentinal One etc 15 years full time education About Accenture We work with one shared purpose to deliver on the promise of technology and human ingenuity Every day more than 775 000 of us help our stakeholders continuously reinvent Together we drive positive change and deliver value to our clients partners shareholders communities and each other We believe that delivering value requires innovation and innovation thrives in an inclusive and diverse environment We actively foster a workplace free from bias where everyone feels a sense of belonging and is respected and empowered to do their best work At Accenture we see well-being holistically supporting our people s physical mental and financial health We also provide opportunities to keep skills relevant through certifications learning and diverse work experiences We re proud to be consistently recognized as one of the World s Best Workplaces TM Join Accenture to work at the heart of change Visit us at Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences All employment decisions shall be made without regard to age race creed color religion sex national origin ancestry disability status military veteran status sexual orientation gender identity or expression genetic information marital status citizenship status or any other basis as protected by applicable law Our rich diversity makes us more innovative more competitive and more creative which helps us better serve our clients and our communities

📌 Security Architect (Pune)
🏢 Accenture
📍 Pune