CyberCX - Principal Consultant - SecOps Modernisation

About the Position

CyberCX - Principal Consultant - SecOps Modernisation

We are seeking a Principal Consultant for SecOps Modernisation to join our team at CyberCX, part of Accenture. This role is pivotal in delivering hands-on technical work behind our customers' Agentic SOC and AI-driven security transformation.

Responsibilities

• Lead end-to-end SOC maturity assessments, including discovery workshops, benchmarking, and prioritized remediation roadmaps.
• Own detection engineering delivery, from gap analysis and threat-informed detection design to rule tuning and reusable content.
• Manage log ingestion and data quality programs, including source audits, pipeline deployments, and compliance-aligned retention and cost policies.
• Run SIEM/SOAR migration engagements end-to-end using Accenture's Modernisation Factory methodology.
• Act as the primary delivery contact for customer engagements, managing stakeholders, escalations, and milestone reporting.
• Direct and mentor Senior Analysts, quality-assuring their work and contributing to the practice's delivery methodologies and playbooks.
• Lead data pipeline deployments across multiple platforms including Bindplane, and onboarding of custom parsers for non-standard log sources.

Requirements

• 5-8 years in SOC operations, security engineering, or detection engineering, including 2-3 years in a delivery-focused or senior practitioner role.
• Hands-on experience designing and tuning detection rules in at least one SIEM (Google SecOps / Chronicle, Splunk, Microsoft Sentinel, CrowdStrike Next-Gen SIEM, or QRadar).
• Hands-on SOAR experience, including playbook design, alert triage and enrichment, case management, and automation logic.
• Proven ability to run security engagements end-to-end, from structured assessment and scoping through to findings delivery, implementation handoff, and SIEM/SOAR migration.
• Strong stakeholder management and communication skills, facilitating customer workshops, translating technical findings into executive-ready reports, and handling milestone tracking and escalations.
• Understanding of a broad range of security telemetry, such as cloud (AWS CloudTrail, Azure Monitor, GCP Audit Logs) and endpoint (Windows Event Logging, Syslog).
• SecOps platform certifications: Google Cloud Security, Splunk Enterprise Certified Architect, Microsoft SC-200.

We Offer

• 18 weeks paid parental leave
• Long & short-term career break opportunities
• Structured career development program
• Local and international career opportunities
• Certified as a Family Inclusive Workplace™
• Flexible Work Arrangements
• Top 3 in last year’s Diversity & Inclusion Index

About the Company

CyberCX, part of Accenture, protects and defends our customers and communities by providing the most comprehensive range of cyber security professional services in the region. Learn more about us at www.accenture.com.

Equal Employment Opportunity Statement for Australia and New Zealand

At Accenture, we recognise that our people are multi-dimensional, and we create a work environment where all people feel like they can bring their authentic selves to work, every day. Our unwavering commitment to inclusion and diversity unleashes innovation and creates a culture where everyone feels they have equal opportunity. We encourage applications from all people, and we are committed to removing barriers to the recruitment process and employee lifecycle. All employment decisions shall be made without regard to age, disability status, ethnicity, gender, gender identity or expression, religion, or sexual orientation. If you require any accommodations or adjustments for interviews and/or at work, please reach out to [email protected] or contact us at +61 2 9005 5000 (Australia) or +64 44666056 (New Zealand).