MxDR SOC Engineer

Hace 1 semana

Málaga, Andalucia, España Accenture Jornada completa
Overview

In this role you join Accenture's Adaptive MxDR service in Málaga, focusing on SIEM/SOAR platform engineering. You will implement, maintain, and optimize security monitoring platforms and partner with SOC analysts and client onboarding teams across a multi-platform environment. You will contribute to threat detection engineering and help scale an AI-augmented SOC for 50+ clients. This role offers hands-on platform work, collaboration across regions, and opportunities to shape detection capabilities and processes.

Responsabilidades
  • Install, configure, and maintain SIEM/SOAR components, including upgrades and patch management
  • Prepare log baseline configurations and troubleshoot parsing issues across devices and sources
  • Monitor health and availability of SIEM components and log sources, and produce regular health reports
  • Onboard and normalize new log sources, review ingestion, and analyze ingestion trends
  • Whitelisting and tuning detection use-cases based on SOC input
  • Create and improve the SIEM use-case library
  • Lead Change Management activities across security monitoring platforms
  • Provide SME support for client SIEM solutions and maintain technical documentation
  • Support SIEM/SOAR applications and deploy/configure log collectors and forwarders
  • Assist with SOAR integrations and playbook development with detection/SOAR engineers
  • Troubleshoot and resolve log-source monitoring and ingestion issues reported by SOC teams
Requisitos principales
  • At least 2 years of experience with SIEM/SOAR platforms (implementation, administration, maintenance, or support)
  • Hands-on experience with Google SecOps, CrowdStrike NG-SIEM, Microsoft Sentinel, or Splunk
  • Knowledge of log integration, ingestion, parsing, and normalization, including troubleshooting related to log collection
  • collaboration
  • communication
  • problem-solving
  • SIEM
  • SOAR
  • log ingestion and parsing