Linux Security Operations Engineer

•           Monitor Linux-based systems, servers, and network infrastructure using SIEM tools (e.g., Splunk, Tanium) for anomalous activity, intrusion attempts, and policy violations.

•           Investigate, triage, and respond to security incidents involving Linux endpoints and servers, following established IR playbooks and escalation procedures. Perform RCA on security events and produce detailed post-incident reports with remediation recommendations.

•           Implement and maintain OS-level security hardening baselines for Linux distributions (RHEL, CentOS, Ubuntu, Debian).

•           Manage and audit security configurations using infrastructure-as-code tools such as Ansible, Puppet.

•           Conduct regular vulnerability scans of Linux systems using tools such as Nessus or Qualys, and prioritize remediation based on risk severity.

•           Evaluate CVEs and security advisories (e.g., from NVD, RedHat, Ubuntu Security) for applicability to the environment and communicate risk to stakeholders.

•           Administer and audit user accounts, sudo privileges, SSH key management, configurations across Linux infrastructure.

•           Configure and maintain centralized logging pipelines for Linux systems using syslog-ng, rsyslog, Fluentd, or the Elastic Stack (ELK).

•           Conduct proactive threat hunting based on threat intelligence feeds.

•           Support compliance, external and internal audits

•           Maintain accurate and up-to-date documentation

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a closely related technical field.

• 3–5 years of hands-on experience in a Linux system administration or security engineering role.

• Demonstrated experience with incident detection and response in Linux environments.
• Strong working knowledge of at least two major Linux distributions: RHEL/CentOS, Ubuntu, Debian, or SUSE.
• Experience with scripting for security automation (Bash, Python, or equivalent).
• Deep understanding of Linux security architecture: kernel security modules, namespaces, cgroups, capabilities, and seccomp profiles.
• Good understanding of security tools: Nessus/Qualys (vulnerability scanning), Fail2ban, iptables/nftables/firewalld.

• Understanding of network protocols and traffic analysis tools (Wireshark, tcpdump, Zeek/Bro).

• Hands-on experience with SIEM platforms (Splunk, Elastic SIEM, or similar) for log analysis and alerting.
• Familiarity with container security (Docker, Kubernetes) and securing containerized Linux workloads.
• Professional certifications :

• • CompTIA Security+ or CompTIA Linux+
  • RHCSA / RHCE (Red Hat Certified System/Security Administrator)
  • Certified Information Systems Security Professional (CISSP)
  • GIAC Certified Enterprise Defender (GCED) or GIAC Security Essentials (GSEC)
  • Certified Ethical Hacker (CEH) or Offensive Security Certified Professional (OSCP) — advantageous

• Fluent in English, both verbal and written.
• Excellent communication skills and ability to collaborate effectively within a team.

Visit us at www.accenture.com 

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.