SOC Analyst

Accenture is a leading global professional services company helping the world's leading enterprises reinvent — building their digital core, unleashing the power of AI, and creating value at speed and scale. We bring together deep industry expertise, cutting-edge technology, and bold thinking to deliver outcomes that matter.

You'll be on the front line of 24x7 SOC operations protecting enterprise clients against active threats. This isn't a passive monitoring role — you'll be triaging, investigating, and responding to real incidents, working within a high-performing global delivery team where speed, accuracy, and judgment all matter.

• Monitor and analyze security alerts from SIEM, SOAR, EDR, and other security tools to identify potential threats across client environments

• Perform timely triage, validation, and investigation of alerts in line with SLA requirements and prioritization frameworks (P1–P4)

• Execute containment, response, and remediation actions using established SOC runbooks

• Manage incidents through the full case lifecycle — accurate documentation, status updates, and closure in the case management system

• Monitor SOC communication channels and ensure timely response to inquiries, escalations, and stakeholder coordination

• Escalate high-severity and complex incidents in line with SLAs, including immediate notification for potential P1/P2 cases

• Conduct effective shift handovers, ensuring active and critical cases are transferred with full context

• Identify and report operational gaps, anomalies, or delays within the same shift to relevant leads

• Contribute to continuous improvement by surfacing gaps in detection, logging, automation, and case handling processes

• Strong understanding of cybersecurity fundamentals — threat types, attack vectors, the CIA triad, and incident response principles

• Working knowledge of operating systems (Windows, Linux/Unix) and networking concepts (TCP/IP, OSI model, DNS, HTTP/S)

• Hands-on experience or familiarity with SIEM/SOAR platforms, endpoint protection, firewalls, and security monitoring tools

• Ability to analyze logs, network traffic, and endpoint telemetry to identify malicious activity

• Disciplined and process-oriented — able to work effectively in a shift-based, SLA-driven environment

• Clear communicator with strong documentation habits and the ability to coordinate across internal and external stakeholders

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field

• Familiarity with the MITRE ATT&CK framework for threat identification and mapping

• Exposure to cloud security concepts across Azure, AWS, or GCP

• Relevant certifications such as CompTIA Security+, BTL1, or CEH