Project Role : Security Managed Services Practitioner
Project Role Description : Deliver and manage security services across client environments to ensure protection, compliance, and operational resilience.
Must have skills : Threat Intelligence Operations
Good to have skills : NA
Minimum
7.5 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
We are looking for an experienced and detail-oriented Security Delivery Specialist to support the planning, implementation, and delivery of cybersecurity services across Microsoft security technologies. The ideal candidate will have practical expertise in Microsoft Sentinel, Cribl, Logstash, DevOps, Terraform, Log source onboarding, and ASIM Parsing, and will play a key role in delivering secure, scalable, and compliant security solutions for internal stakeholders or clients.
Roles & Responsibilities:
• Deliver security solutions using Microsoft security stack, with a focus on Microsoft Sentinel Platform
Management.
• Translate business and technical requirements into well-architected security solutions and support
delivery from design to deployment.
• Manage clusters with multiple clients.
• Lead and manage cross-functional teams, ensuring effective collaboration, communication, and
alignment with business objectives. Responsible for team decisions.
• Engage with multiple teams and contribute on key decisions.
• Develop and implement security strategies.
• Conduct security assessments and audits.
• Stay updated on the latest security trends and technologies.
• Configure and fine-tune Microsoft Sentinel, develop analytics rules, workbooks, playbooks, and
maintain alerting mechanisms.
• Coordinate with engineering, operations, and risk teams to ensure consistent and secure delivery of
services.
• Create technical documentation, deployment guides, and knowledge transfer materials for clients or
internal teams.
• Collaborate with project managers and stakeholders to ensure timely and successful delivery of
security services.
• Contribute to continuous improvement initiatives and automation of delivery processes.
Professional & Technical Skills:
• Strong client-facing and stakeholder engagement capabilities.
• Excellent organizational and project coordination skills.
• Ability to clearly communicate technical information to both technical and non-technical audiences.
• Proactive mindset with a focus on security service quality and consistency.
• Experience working in delivery frameworks such as Agile, ITIL.
• Microsoft Sentinel: Hands-on experience with SIEM/SOAR, including KQL query development, alert
tuning, and automation with Logic Apps.
• Configure and fine-tune Microsoft Sentinel, develop analytics rules, workbooks, playbooks, and
maintain alerting mechanisms.
• KQL (Kusto Query Language) Proficiency: Ability to create analytics rules, hunting queries,
workbooks, and detections in Sentinel.
• Ability to create and tune analytics rules using behavioral detection techniques, building watchlists,
and custom rule logic.
• Knowledge of MITRE ATT&CK & Threat Modeling: Developing detection coverage across ATT&CK
techniques, identifying detection gaps, and prioritizing use cases based on threat relevance.
• Log Source and Data Schema Familiarity (ASIM): Mapping raw logs to the ASIM model,
understanding normalized data schemas (e.g., DeviceEvents, NetworkSession), and validating data
quality.
• Able to manage Key Vault and secret rotation.
• Required knowledge of Entra ID management.
• Required knowledge in log source optimization.
• SIM parsing and normalization.
• Managing Cribl and Logstash pipeline for log source onboarding.
• Strong understanding of incident response and threat management.
• Familiarity with scripting (PowerShell, KQL), infrastructure-as-code, and automation tools is a plus.
• Able to manage requests, incidents, and changes on ServiceNow as per service management
process.
• Required active participation/contribution in team discussions.
• To be a part of audits and service improvement activities within the team.
• Experience in designing and implementing security solutions.
• Deliver security solutions using Microsoft security stack, with a focus on Microsoft Defender for
Cloud, Endpoint, Identity, Azure Firewall, and Microsoft Sentinel.
• Implement and operationalize Microsoft Defender for Cloud (MDC) for cloud security posture
management and workload protection.
• Support deployment and ongoing management of Microsoft Defender for Endpoint (MDE) for
endpoint threat detection and response.
• Integrate Microsoft Defender for Identity (MDI) into customer environments to monitor identity-
related threats and provide remediation recommendations.
• Knowledge of network security protocols and best practices.
• Hands-on experience with security tools and technologies.
Additional Information:
- The candidate should have a minimum of 7+ years of experience in Managed Cloud Security
Services.
- This position will be operated from Bengaluru location.
- A 15 years full time education is required.
15 years full time education
About Accenture
Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.
Visit us at www.accenture.com
Equal Employment Opportunity Statement
We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.