23 oct
|
Accenture
|
Málaga
Overview
In this role you join Accenture's Adaptive MxDR service in Málaga, focusing on SIEM/SOAR platform engineering. You will implement, maintain, and optimize security monitoring platforms and partner with SOC analysts and client onboarding teams across a multi-platform environment. You will contribute to threat detection engineering and help scale an AI-augmented SOC for 50+ clients. This role offers hands-on platform work, collaboration across regions, and opportunities to shape detection capabilities and processes.
Responsabilidades
- Install, configure, and maintain SIEM/SOAR components, including upgrades and patch management
- Prepare log baseline configurations and troubleshoot parsing issues across devices and sources
- Monitor health and availability of SIEM components and log sources, and produce regular health reports
- Onboard and normalize new log sources, review ingestion, and analyze ingestion trends
- Whitelisting and tuning detection use-cases based on SOC input
- Create and improve the SIEM use-case library
- Lead Change Management activities across security monitoring platforms
- Provide SME support for client SIEM solutions and maintain technical documentation
- Support SIEM/SOAR applications and deploy/configure log collectors and forwarders
- Assist with SOAR integrations and playbook development with detection/SOAR engineers
- Troubleshoot and resolve log-source monitoring and ingestion issues reported by SOC teams
Requisitos principales
- At least 2 years of experience with SIEM/SOAR platforms (implementation, administration, maintenance, or support)
- Hands-on experience with Google Sec Ops, Crowd Strike NG-SIEM, Microsoft Sentinel, or Splunk
- Knowledge of log integration, ingestion, parsing, and normalization, including troubleshooting related to log collection
- collaboration
- communication
- problem-solving
- SIEM
- SOAR
- log ingestion and parsing
📌 MxDR SOC Engineer (Málaga)
🏢 Accenture
📍 Málaga