SOC L1 Analyst / Investigator #CFCPrague

Written by the T&S Network from Accenture's posting.

Tier 1 security operations work at Accenture's Cyber Fusion Center in Prague, where analysts monitor client environments 24x7 for SIEM and detection alerts, triage them, and escalate suspected incidents to clients. The team of about 240 supports clients globally in detecting suspicious activity and responding to security incidents.

What you'd do

• Validate and prioritize alerts by severity, impact, and confidence.
• Run basic log and event analysis across SIEM, EDR, and related security tools.
• Follow documented playbooks and runbooks for investigation, containment support, and escalation.
• Create and maintain incident records covering findings, actions taken, and escalation details.
• Support round-the-clock monitoring and shift handovers to keep operations continuous.
• Report false positives, recurring issues, and detection tuning opportunities.
• Escalate suspected threats to L2/L3 or client stakeholders within SLA timelines.

What it asks for

• Ready to work rotating shifts for 24x7 monitoring.
• Knowledge of Windows and Unix/Linux operating systems and networking protocols such as TCP/IP, firewalls, and routers.
• Analytical skills and ability to manage multiple tasks.
• Interest in building cybersecurity skills and a willingness to learn.
• Legal right to work in the Czech Republic.
• Proficiency in written and spoken English.
• One year of experience with SIEM tools such as QRadar, Splunk, or ArcSight (preferred)

Worth knowing

• Rotating shifts for 24x7 monitoring coverage
• Work delivered to clients' environments as part of Accenture's managed SOC services

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Accenturenorth_east before you apply. If we got something wrong, report this listing.