In this role you will implement and optimize SIEM/SOAR platforms within Accenture's Adaptive MxDR SOC, supporting a multi-client, international environment. You will work with SOC analysts, detection and SOAR engineers to onboard log sources and fine-tune detections. You will monitor platform health, manage changes, and contribute to threat-detection engineering and AI-augmented SOC initiatives. This role offers impact at scale across 50+ clients and diverse technologies.
Responsabilidades
- Install, configure, and maintain SIEM/SOAR components, including upgrades and patch management
- Prepare log baseline configurations and troubleshoot parsing issues
- Monitor health and availability of SIEM components and log sources; produce health reports
- Onboard and normalize new log sources; analyze ingestion trends
- Fine-tune detections and maintain SIEM use-case library
- Drive Change Management for security monitoring platforms
- Provide SME support for client SIEM solutions and maintain documentation
- Support SIEM/SOAR applications and deployment of log collectors and forwarders
- Assist with SOAR integrations, playbook development, and cross-team collaboration
- Troubleshoot client monitoring issues and log-source problems
Requisitos principales
- Minimum 2 years of experience with SIEM/SOAR platforms
- Hands-on experience with Google SecOps, CrowdStrike NG-SIEM, Microsoft Sentinel, or Splunk
- Knowledge of log integration, ingestion, parsing, and normalization
- English proficiency at C1 level for international collaboration
- Collaborative mindset
- Problem-solving and analytical thinking
- Clear communication in English
- SIEM/SOAR platform administration
- Log ingestion, parsing, and normalization
- Log source onboarding and integration