SOC Specialist (L1/L2 - Secret Cleared)

Accenture Security helps organizations prepare, protect, detect, respond, and recover along all points of the security lifecycle. Cybersecurity challenges are different for every business in every industry. Leveraging our global resources and advanced technologies, we create integrated, turnkey solutions tailored to our clients’ needs across their entire value chain. Whether we’re defending against known cyberattacks, detecting and responding to the unknown, or running an entire security operations center, we will help companies build cyber resilience to grow with confidence. Our team of the security sector’s brightest people use the coolest tech to out-hack the hackers and help clients build resilience from within. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle.

Passionate about security, love what you do and have a genuine desire to outsmart the bad guys. You have the experience to analyze a clients’ security posture, anticipate security requirements and help find right-sized solutions based on industry leading practices. You have a proven track record working successfully in a fast-paced, team-oriented environment. You’re a creative, analytical problem solver with above average documentation skills who can speak to both technical and non-technical audiences. Can apply deep security skills to design, build and protect enterprise systems, applications, data, assets and people for Accenture and our clients. You are eager to put your skills to use by helping us help our clients inject security at every level of their organization.

• Analysis and support: as part of a combined L1-2 team monitor and investigate security incidents

o Perform detailed analysis, triage and escalation of detected events

o Provide recommendations for remediation

o Provide incident response support to the downstream teams applying fixes

o Support use case enhancements and log source integration activities

o Monitor SIEM health and required maintenance

o Support tuning and optimization of the SIEM

o Define manual/automated incident management process leveraging ticketing tool

o Define processes to categorize, document, measure and report security incidents

o Manage requests submitted by client to the team

• Note: this role requires in-person work in Ottawa most days and will also form part of a shift rotation supporting a 24/7 environment.

• 2+ years of experience working with SIEM tools for the analysis and investigation of incidents and events. Experience with Elastic Security preferred.

• In possession of active Level II Secret clearance for the Canadian federal government

• Experience performing SIEM deployment, configuration and content development preferred

• 2+ years of experience working with security tools administration (e.g. firewalls, IDS, end-point protection, content filtering, IAM, DLP)

• 2+ years of experience working with security operations capabilities (e.g. incident response, security infrastructure management or monitoring services)

• Proven success in contributing to a team-oriented environment

• Proven ability to work creatively and analytically in a problem-solving environment

• Excellent leadership, communication (written and oral) and interpersonal skills

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.