Join Accenture Security and help clients strengthen their ability to detect, investigate and respond to evolving cyber threats.
As a Security Delivery Specialist, you will serve as a senior cybersecurity practitioner responsible for supporting and enhancing Security Operations Center capabilities across incident response, SIEM, endpoint detection and response (EDR), and network detection and response (NDR).
You will combine deep technical expertise with strong analytical and leadership capabilities, guiding security teams through complex investigations while continuously improving detection, response and security-monitoring capabilities.
What You’ll Do
Incident Response & SOC Operations
- Develop, maintain and enhance Incident Response plans, SOC policies, processes, procedures and operational playbooks.
- Lead and support the investigation, analysis and response to complex cybersecurity events and incidents.
- Analyze security events across multiple technologies and provide technical guidance to security analysts and engineering teams.
- Support the continuous development and maturity of Cybersecurity Operations Center processes and procedures.
- Provide technical leadership during investigations and escalations, including on-call support when required.
-
Identify operational and detection gaps and recommend improvements to strengthen security monitoring and response.
SIEM & Detection Engineering
-
Work closely with SIEM engineers and cybersecurity teams to develop, refine and optimize correlation and detection rules.
- Analyze security telemetry to identify suspicious behavior, attack patterns and emerging threats.
- Support the integration of EDR, NDR and other security technologies with enterprise SIEM platforms.
- Develop and tune custom correlation rules to improve detection effectiveness and reduce unnecessary noise.
-
Translate threat and incident insights into recommendations that enhance detection and response capabilities.
EDR & Endpoint Security
-
Administer and optimize enterprise Endpoint Detection and Response (EDR) technologies.
- Deploy, upgrade and maintain EDR agents across Windows, macOS and Linux environments.
- Monitor EDR agent health and troubleshoot connectivity, reporting and platform issues.
- Develop, maintain and optimize EDR policies and configurations.
- Integrate EDR capabilities with SIEM and other cybersecurity platforms.
- Regularly assess existing EDR configurations and recommend enhancements to improve security coverage and effectiveness.
-
Manage and coordinate technical support cases with EDR vendors when required.
NDR & Network Security Monitoring
-
Administer and optimize enterprise Network Detection and Response (NDR) technologies.
- Develop, maintain and continuously improve NDR policies and configurations.
- Integrate NDR capabilities with SIEM and other security technologies.
- Develop and maintain custom correlation rules leveraging EDR and NDR telemetry.
- Periodically review platform configurations, detection coverage and performance to identify opportunities for improvement.
-
Troubleshoot technical issues and coordinate vendor support through resolution.
Cyber Intelligence & Stakeholder Management
-
Produce high-quality cybersecurity intelligence, operational and incident reports for technical and non-technical audiences.
- Translate complex cybersecurity findings into clear risks, impacts and recommended actions.
- Communicate effectively with information security teams, technology stakeholders, business representatives and senior management.
- Provide technical guidance and mentorship to security team members.
-
Collaborate across security, infrastructure, network and technology teams to resolve security issues and improve cyber defense capabilities.
What You’ll Need
-
Strong experience in Security Operations Center (SOC) environments and Incident Response.
- Demonstrated experience developing Incident Response plans, SOC policies, processes, procedures and playbooks.
- Strong hands-on knowledge of Security Information and Event Management (SIEM) technologies.
- Experience developing, refining and tuning SIEM correlation and detection rules.
- Hands-on expertise administering enterprise EDR technologies.
- Experience deploying and maintaining EDR agents across Windows, macOS and Linux.
- Experience administering NDR technologies and integrating NDR telemetry into broader security-monitoring environments.
- Strong understanding of security-event analysis, investigation, detection and response.
- Experience integrating SIEM, EDR, NDR and other cybersecurity technologies.
- Strong analytical, troubleshooting and organizational capabilities.
- Ability to provide hands-on technical leadership and guidance during complex security incidents.
- Excellent written and verbal communication skills, including the ability to communicate technical and strategic cybersecurity matters to different levels of an organization.
-
Ability to support operational escalations and participate in on-call support when required.
Bonus Points If You Have
-
GIAC Certified Incident Handler (GCIH)
- GIAC Continuous Monitoring Certification (GMON)
- GIAC Certified Forensic Analyst (GCFA)
- Comparable industry-recognized cybersecurity or incident-response certifications.
- Experience working in large-scale or complex enterprise SOC environments.
- Experience supporting Managed Security Services.
- Exposure to detection engineering, threat hunting and cyber threat intelligence.
