Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Breach Response Operations
Good to have skills : NA
Minimum 12 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
We are seeking a skilled Security Incident and Response Operations Manager to join our Cybersecurity team. The ideal candidate will be responsible for monitoring, investigating, containing, and responding to cybersecurity incidents and security breaches. This role requires strong analytical skills, knowledge of security operations, and the ability to work in a fast-paced, 24x7 environment to protect organizational assets and ensure business continuity.
Security Incident and Response Operations Manager
Roles & Responsibilities:
Monitor security alerts and incidents using SIEM and security monitoring tools.
Investigate, analyze, and respond to cybersecurity incidents, including malware, phishing, ransomware, insider threats, and unauthorized access attempts.
Perform incident triage, containment, eradication, and recovery activities.
Conduct root cause analysis and document findings with recommendations for remediation.
Coordinate with IT, Infrastructure, Network, Cloud, and Application teams during security incidents.
Build and strengthen client relationships, act as a trusted advisor, and support business growth opportunities.
Manage SOC team of L1/L2/L3 and platform engineering
Manage multiple SOC delivery and clients
Perform threat hunting and identify indicators of compromise (IOCs).
Manage incident response activities in accordance with established playbooks and security policies.
Support digital forensic investigations and evidence collection when required.
Develop and maintain incident response documentation, runbooks, and standard operating procedures.
Ensure timely escalation of critical security incidents to relevant stakeholders.
Participate in post-incident reviews and recommend preventive security improvements.
Support security audits and compliance initiatives.
Professional & Technical Skills:
Strong understanding of Incident Response (IR) lifecycle and Cybersecurity Operations.
Experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, or Google Chronicle.
excellent client-facing, stakeholder management, communication, and consulting skills.
Ability to work from client office 5 days a week and manage client-facing engagements
Knowledge of Endpoint Detection and Response (EDR) tools such as Microsoft Defender, CrowdStrike Falcon, SentinelOne, or Carbon Black.
Understanding of network security, TCP/IP, DNS, VPN, firewalls, IDS/IPS, and proxy technologies.
Knowledge of malware analysis, phishing investigations, and threat intelligence.
Familiarity with MITRE ATT&CK Framework, Cyber Kill Chain, and NIST Incident Response Framework.
Experience with Windows, Linux, Active Directory, Microsoft 365, and cloud environments (Azure, AWS, or GCP).
Basic scripting knowledge (PowerShell, Python, or Bash) is preferred.
Strong analytical, troubleshooting, and communication skills.
Preferred Qualifications
Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
Relevant certifications such as:
o CompTIA Security+
o GIAC Certified Incident Handler (GCIH)
o Certified Ethical Hacker (CEH)
o CISSP
o Microsoft Certified: Security Operations Analyst
o Splunk Core Certified Power User (preferred)
Experience
10- 12+ years of experience in Security Operations Center (SOC), Incident Response, Cybersecurity Operations, or Threat Detection.
Good to Have
Experience with SOAR platforms and security automation.
Knowledge of cloud security monitoring.
Experience with vulnerability management tools.
Understanding of threat intelligence platforms and IOC management.
Knowledge of compliance standards such as ISO 27001, NIST, PCI DSS, SOC 2, and GDPR.
Willingness to work in a 24x7 rotational support environment.
Additional Information:
The candidate should have minimum 12 years of experience in Security Breach Response Operations.
This position is based at our Mumbai (Client Onsite)
A 15 years full time education is required.
15 years full time education
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Breach Response Operations
Good to have skills : NA
Minimum 12 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
We are seeking a skilled Security Incident and Response Operations Manager to join our Cybersecurity team. The ideal candidate will be responsible for monitoring, investigating, containing, and responding to cybersecurity incidents and security breaches. This role requires strong analytical skills, knowledge of security operations, and the ability to work in a fast-paced, 24x7 environment to protect organizational assets and ensure business continuity.
Security Incident and Response Operations Manager
Roles & Responsibilities:
Monitor security alerts and incidents using SIEM and security monitoring tools.
Investigate, analyze, and respond to cybersecurity incidents, including malware, phishing, ransomware, insider threats, and unauthorized access attempts.
Perform incident triage, containment, eradication, and recovery activities.
Conduct root cause analysis and document findings with recommendations for remediation.
Coordinate with IT, Infrastructure, Network, Cloud, and Application teams during security incidents.
Build and strengthen client relationships, act as a trusted advisor, and support business growth opportunities.
Manage SOC team of L1/L2/L3 and platform engineering
Manage multiple SOC delivery and clients
Perform threat hunting and identify indicators of compromise (IOCs).
Manage incident response activities in accordance with established playbooks and security policies.
Support digital forensic investigations and evidence collection when required.
Develop and maintain incident response documentation, runbooks, and standard operating procedures.
Ensure timely escalation of critical security incidents to relevant stakeholders.
Participate in post-incident reviews and recommend preventive security improvements.
Support security audits and compliance initiatives.
Professional & Technical Skills:
Strong understanding of Incident Response (IR) lifecycle and Cybersecurity Operations.
Experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, or Google Chronicle.
excellent client-facing, stakeholder management, communication, and consulting skills.
Ability to work from client office 5 days a week and manage client-facing engagements
Knowledge of Endpoint Detection and Response (EDR) tools such as Microsoft Defender, CrowdStrike Falcon, SentinelOne, or Carbon Black.
Understanding of network security, TCP/IP, DNS, VPN, firewalls, IDS/IPS, and proxy technologies.
Knowledge of malware analysis, phishing investigations, and threat intelligence.
Familiarity with MITRE ATT&CK Framework, Cyber Kill Chain, and NIST Incident Response Framework.
Experience with Windows, Linux, Active Directory, Microsoft 365, and cloud environments (Azure, AWS, or GCP).
Basic scripting knowledge (PowerShell, Python, or Bash) is preferred.
Strong analytical, troubleshooting, and communication skills.
Preferred Qualifications
Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
Relevant certifications such as:
o CompTIA Security+
o GIAC Certified Incident Handler (GCIH)
o Certified Ethical Hacker (CEH)
o CISSP
o Microsoft Certified: Security Operations Analyst
o Splunk Core Certified Power User (preferred)
Experience
10- 12+ years of experience in Security Operations Center (SOC), Incident Response, Cybersecurity Operations, or Threat Detection.
Good to Have
Experience with SOAR platforms and security automation.
Knowledge of cloud security monitoring.
Experience with vulnerability management tools.
Understanding of threat intelligence platforms and IOC management.
Knowledge of compliance standards such as ISO 27001, NIST, PCI DSS, SOC 2, and GDPR.
Willingness to work in a 24x7 rotational support environment.
Additional Information:
The candidate should have minimum 12 years of experience in Security Breach Response Operations.
This position is based at our Mumbai (Client Onsite)
A 15 years full time education is required.
15 years full time education
About Accenture
Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.Visit us at www.accenture.com
Equal Employment Opportunity Statement
We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.