Bring Elastic Security and SIEM investigation experience to Accenture Security’s Ottawa operations team. Support monitoring, event analysis, and response within a 24/7 shift rotation.
This mid-level SOC Specialist role combines L1-L2 monitoring with security operations support. You will investigate detected events, enhance use cases, integrate log sources, and help optimize SIEM capabilities. The position also supports incident processes, client requests, and teams applying remediation fixes.
Key Responsibilities:
- Perform detailed analysis, triage, and escalation of events
- Support Elastic Security and other SIEM content development
- Integrate log sources and enhance security monitoring use cases
- Define incident categorization, documentation, measurement, and reporting
- Provide response support to teams applying security fixes
Requirements:
- Two-plus years analyzing incidents with SIEM tools
- Elastic Security experience preferred for this position
- Active Level II Secret clearance for federal government work
- Experience with SIEM deployment, configuration, and content development
- Creative, analytical problem-solving ability in team environments
Use Elastic Security, SIEM content development, and incident analysis skills to support Accenture’s Ottawa security operations.