SOC Team Lead (L2) – Incident Response & Cyber Defense

About the role

Lead the Incident Response function within Accenture’s Cybersecurity SOC, guiding analysts in detecting, investigating and remediating advanced threats across enterprise environments.

Key responsibilities

• Lead investigation and resolution of complex security incidents escalated from L1 analysts.
• Perform root‑cause analysis, threat validation and triage across enterprise networks.
• Act as primary responder during high‑severity incidents, coordinating with CSIRT, engineering teams and stakeholders.
• Conduct threat‑hunting activities using indicators of compromise and threat intelligence.
• Mentor and coach SOC analysts through quality reviews and incident‑handling best practices.
• Collaborate with detection‑engineering teams to improve use cases, alert quality and SOC processes.
• Maintain incident documentation, reports, playbooks and operational procedures.

Required profile

• 3–5+ years of experience in a SOC, Incident Response or Cyber Defense environment.
• Previous experience leading, mentoring or supervising SOC analysts.
• Strong hands‑on experience investigating incidents using SIEM and security monitoring tools.
• Solid knowledge of network security, threat detection, malware analysis, incident response and threat hunting.
• Ability to work effectively during high‑priority incidents and coordinate cross‑functional response efforts.

Required skills

• SIEM platforms such as Splunk, Microsoft Sentinel, QRadar or Google SecOps.
• CrowdStrike Falcon (highly preferred).
• Scripting with Python or PowerShell.
• Cloud security monitoring on AWS, Azure or GCP.

What we offer

• Competitive salary package with performance bonus and 13th month pay.
• Day‑1 HMO and life‑insurance coverage.
• Flexible working arrangements and hybrid work model.
• Company‑sponsored training, upskilling and certifications.
• Employee Stock Purchase Plan and expanded parental benefits.
• Inclusive and collaborative workplace culture.