Triage Analyst

The role

The CTOC Triage Analyst performs initial triage and analysis of cyber threat reports and alerts. This role involves monitoring alert queues, performing remediation, and ensuring signal ingestion health across tools.

What you will do

• Monitor alert queues for sensitive assets and known attacker campaigns
• Perform automated and manual remediation of adverse events
• Ensure the health of signal ingestion across customer and third-party tools
• Work closely with other teams to escalate incidents
• Recommend improvements to response techniques and automation playbooks

Required qualifications

• 2 years of experience working with security features of the customer’s cloud services
• Experience with 2 or more of the following: PowerShell, XDR, SIEM/SOAR capabilities, Trellix Host Based Security System, Splunk, or similar tools
• CompTIA Security+ certification
• Must have an active TS/SCI level clearance
• Must have a US passport

Benefits

• hands-on experience
• certifications
• industry training

Before you apply

• Must have an active TS/SCI level clearance
• Must have a US passport
• Applicants in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States
• Candidates currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration

About the company

Accenture Federal Services is a technology company within global Accenture that serves the US federal government. Its 13,000+ people work across defense, national security, public safety, civilian, and military health organizations.