SOC L2 Team Lead – Lead Incident Response

About the role

Accenture is seeking an experienced SOC L2 Team Lead to drive incident response and strengthen cyber defense across its enterprise environment. You will lead analysts, coordinate high‑severity incidents, and continuously improve SOC processes.

Key responsibilities

• Lead investigation and resolution of complex security incidents escalated from L1 analysts.
• Perform root‑cause analysis, threat validation, and incident triage across enterprise environments.
• Act as a primary responder during high‑severity incidents, coordinating with CSIRT, engineering teams, and stakeholders.
• Conduct threat‑hunting activities using IoCs and threat intelligence.
• Mentor SOC analysts through coaching, quality reviews, and best‑practice incident handling.
• Collaborate with detection engineering to improve use cases, alert quality, and SOC processes.
• Maintain incident documentation, reports, playbooks, and operational procedures.

Required profile

• 3–5+ years of experience in a SOC, Incident Response, or Cyber Defense environment.
• Previous experience leading, mentoring, or supervising SOC analysts is highly preferred.
• Strong hands‑on experience investigating security incidents using SIEM and security monitoring tools.
• Ability to work effectively during high‑priority security incidents and coordinate cross‑functional response efforts.

Required skills

• SIEM platforms such as Splunk, Sentinel, QRadar, Google SecOps.
• Scripting with Python or PowerShell for automation and investigations.
• Cloud security monitoring across AWS, Azure, or GCP.
• Certifications: Security+, CEH, GCIH, GCIA (or similar).

What we offer

• Competitive salary package with performance bonus and 13th month pay.
• HMO and life insurance coverage.
• Flexible working arrangements and hybrid work model.
• Company‑sponsored training, upskilling, and certifications.
• Expanded maternity and paternity benefits.
• Employee Stock Purchase Plan and inclusive collaborative culture.