Principal Consultant - SecOps Modernisation

About the role

CyberCX, part of Accenture, is recruiting a Principal Consultant for its APAC SecOps Modernisation team. This hands-on technical role delivers the work behind customers' Agentic SOC and AI-driven security transformation. It sits between Senior Analyst and Senior Manager levels, owning customer engagements end-to-end: SOC maturity assessments, detection engineering, log optimisation and SIEM/SOAR migrations.

Key responsibilities

• Lead end-to-end SOC maturity assessments, including discovery workshops, benchmarking against MITRE ATT&CK/NIST CSF/CIS Controls and prioritised remediation roadmaps.
• Own detection engineering delivery, from gap analysis and threat-informed detection design through to rule tuning and reusable content for the APAC practice.
• Manage log ingestion and data quality programmes, including source audits, pipeline deployments (e.g. Bindplane) and retention and cost policies aligned to compliance.
• Run SIEM/SOAR migration engagements end-to-end using the Modernisation Factory methodology, from design through build and optimisation.
• Act as primary delivery contact, managing stakeholders, escalations and milestone reporting.
• Direct and mentor Senior Analysts, quality-assure their work and contribute to delivery methodologies and playbooks.
• Lead data pipeline deployments across platforms including Bindplane and onboarding of custom parsers for non-standard log sources.

Required profile

• 5-8 years in SOC operations, security engineering or detection engineering, including 2-3 years in a delivery-focused or senior practitioner role.
• Proven ability to run security engagements end-to-end, from assessment and scoping through to findings delivery, implementation handoff and SIEM/SOAR migration.
• Strong stakeholder management and communication skills, including customer workshops and translating technical findings into executive-ready reports.

Required skills

• Hands-on detection rule design and tuning in at least one SIEM (Google SecOps / Chronicle, Splunk, Microsoft Sentinel, CrowdStrike Next-Gen SIEM or QRadar).
• Hands-on SOAR experience: playbook design, alert triage and enrichment, case management and automation logic.
• Security telemetry knowledge such as AWS CloudTrail, Azure Monitor, GCP Audit Logs, Windows Event Logging and Syslog.
• SecOps platform certifications: Google Cloud Security, Splunk Enterprise Certified Architect, Microsoft SC-200.

What we offer

• 18 weeks of paid parental leave and long and short-term career break opportunities.
• Structured career development and local and international career opportunities.
• Family inclusive workplace and flexible work arrangements.
• Comprehensive training covering business acumen, technical and professional skills, with formal and informal programmes.