A

Accenture

Advises businesses and runs their technology

Security Analyst

Security Operations & Incident ResponsePosted on Nov 11
Full-timeSydney NSW, AustraliaNo salary listedIn-person

About the Job

Requirements

  • Practical experience working in a SOC, MSSP, MDR or security operations environment.
  • Hands-on experience investigating security alerts and incidents.
  • Experience with a SIEM such as Microsoft Sentinel, Splunk or a comparable platform.
  • Exposure to EDR/XDR platforms such as Microsoft Defender, CrowdStrike or Cortex XDR.
  • Understanding of common identity and account compromise scenarios.
  • Exposure to Microsoft Azure, Entra ID or broader cloud security environments.
  • An understanding of incident response and security investigation methodologies.
  • Experience analysing logs and correlating activity across multiple data sources.
  • Exposure to detection tuning, detection engineering or threat hunting.
  • A good understanding of common attacker behaviours and frameworks such as MITRE ATT&CK.
  • Ability to look beyond simply closing an alert and understand why it triggered, what happened, what may be affected and what action should be taken next.
  • Ability to connect technical findings to customer risk and communicate recommendations clearly.
  • Strong written and verbal communication skills.

Responsibilities

  • Monitor and investigate security alerts across enterprise customer environments.
  • Analyse security events using SIEM platforms such as Microsoft Sentinel and Splunk.
  • Investigate suspicious activity across identity, cloud, endpoint and network telemetry.
  • Support incident response activities including investigation, scoping, containment and escalation.
  • Work with technologies including Microsoft Defender, CrowdStrike and Cortex XDR.
  • Tune existing detections and help reduce false positives and alert noise.
  • Assist with the development of new detections and customer-specific security use cases.
  • Participate in threat hunting activities based on threat intelligence, customer concerns or identified indicators.
  • Identify gaps in logging, detections and security visibility.
  • Support vulnerability management activities, including reviewing and prioritising findings.
  • Communicate security findings and recommendations clearly to customers and internal stakeholders.
  • Contribute to automation, process improvement and broader SOC capability development.
  • Work closely with Senior Analysts and Technical Leads on complex investigations and escalations.
  • Participate in the team’s rotating on-call roster for after-hours escalations.

Desired Qualifications

  • Experience with vulnerability management platforms such as Tenable or Qualys.

About the Company

Accenture

Advises businesses and runs their technology

Accenture advises large businesses and public agencies on strategy, builds their technology systems and runs ongoing operations. Its teams connect business planning with implementation, covering areas such as cloud migration, cybersecurity and customer experience. Consultants work with clients to redesign processes, while engineers integrate software from technology partners and maintain the resulting systems for multinational organizations. Clients pay for project work or continuing services, including application support and business processes such as finance and customer service. Accenture was founded in 1989 and has its headquarters in Dublin, Ireland.

Company size
10,001+
Company stage
IPO
Headquarters
Dublin, Ireland
Founded
1989

Recently Posted Jobs

Explore more opportunities at Accenture

See more jobs