A

Accenture

Advises businesses and runs their technology

Security Delivery Lead

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeBengaluru, Karnataka, IndiaNo salary listed

About the Job

Requirements

  • At least 12 years of experience in cybersecurity, including at least 8 years in incident response or SOC operations.
  • Proficiency in Security Information and Event Management (SIEM), including experience with platforms such as Splunk, QRadar, Sentinel, or MxDR.
  • Proven experience leading responses to critical security incidents and breaches.
  • Expertise in analyzing and interpreting logs, packet captures, endpoint telemetry, and malware samples.
  • Strong experience with Endpoint Detection and Response (EDR) platforms such as CrowdStrike or Carbon Black.
  • Hands-on experience with Security Orchestration, Automation and Response (SOAR) platforms and scripting in Python, PowerShell, or Bash.
  • Familiarity with MITRE ATT&CK, the Cyber Kill Chain, and threat modeling frameworks.
  • Understanding of Windows, Linux, network protocols, and cloud environments such as AWS and Azure.
  • Strong written and verbal communication skills, particularly in high-pressure situations.
  • At least 12 years of experience in SIEM.
  • At least 15 years of full-time education.

Responsibilities

  • Lead critical security incidents and complex investigations.
  • Triage, analyze, and respond to escalated security alerts and events from Level 1–3 SOC teams.
  • Conduct root cause analyses, forensic investigations, and impact assessments.
  • Coordinate with internal stakeholders and external partners during major incidents, including breach response.
  • Develop and execute incident response plans and playbooks for various attack scenarios.
  • Proactively hunt for threats using SIEM, EDR, and threat intelligence data.
  • Identify and mitigate advanced persistent threats and zero-day exploits.
  • Analyze malware, network traffic, endpoint artifacts, and log data to detect and contain threats.
  • Tune detection content and enhance alerting logic across SIEM and SOAR platforms.
  • Integrate and optimize tools such as Splunk, MxDR, Sentinel, CrowdStrike, Tines, and XSOAR.
  • Contribute to developing and refining automated response workflows using SOAR tools.
  • Guide and mentor Level 1–3 analysts on investigation techniques and escalation paths.
  • Conduct knowledge-sharing sessions and tabletop exercises to prepare for incident response.
  • Assist in training team members on evolving threats, tools, and methodologies.
  • Prepare detailed incident reports, post-incident reviews, and lessons learned.
  • Maintain current documentation of incident-handling procedures and response plans.
  • Communicate technical findings to technical and non-technical stakeholders.

Desired Qualifications

  • One or more of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), MITRE ATT&CK Defender (MAD), or Azure/AWS security certifications.

About the Company

Accenture

Advises businesses and runs their technology

Accenture advises large businesses and public agencies on strategy, builds their technology systems and runs ongoing operations. Its teams connect business planning with implementation, covering areas such as cloud migration, cybersecurity and customer experience. Consultants work with clients to redesign processes, while engineers integrate software from technology partners and maintain the resulting systems for multinational organizations. Clients pay for project work or continuing services, including application support and business processes such as finance and customer service. Accenture was founded in 1989 and has its headquarters in Dublin, Ireland.

Company size
10,001+
Company stage
IPO
Headquarters
Dublin, Ireland
Founded
1989

Recently Posted Jobs

Explore more opportunities at Accenture

See more jobs