Cloud Security Operations Analyst

Accenture CyberSecurity helps organizations prepare, protect, detect, respond and recover across all aspects of the security lifecycle. Cybersecurity challenges are different for every business and industry. Leveraging our global resources and advanced technologies, we create integrated, end‑to‑end solutions tailored to our clients’ needs across their entire value chain, helping them build cyber resilience and grow with confidence.

We are seeking a highly qualified professional to join our team as a Cloud Security Operations Analyst. As an essential part of our Security Transformation team, you will be responsible for monitoring, investigating, and responding to cloud-native security threats across enterprise environments. We are looking for a professional with strong expertise in Cloud Security Operations, Kubernetes security, and incident response, with hands-on experience in Sysdig CNAPP and cloud-native technologies.

Qualifications

• Minimum of 3 years of experience in Security Operations, Cloud Security, or SOC environments
• Hands-on experience with Sysdig CNAPP / Sysdig Secure for security monitoring, alert triage, and incident investigation
• Strong understanding of Kubernetes, containers, and cloud-native security concepts
• Experience with vulnerability management, incident response, and remediation processes
• Knowledge of Next-Generation Firewalls (NGFWs), Web Application Firewalls (WAFs), and security monitoring tools
• Experience working with incident management and ticketing systems
• Strong analytical, troubleshooting, and problem-solving skills
• Experience operating in production environments with critical business services
• Experience with scripting and automation using Python, Bash, or Terraform
• Fluent in English (C1 or above), with excellent written and verbal communication skills

Responsibilities

• Monitor Kubernetes runtime security across enterprise containerized environments using Sysdig CNAPP
• Investigate, triage, and respond to security alerts affecting containers, pods, and namespaces
• Analyze and optimize runtime detection rules to improve alert quality and reduce false positives
• Escalate security incidents to Application, Platform, and Infrastructure teams, providing remediation guidance and technical recommendations
• Monitor NGFW and WAF security events and support incident response activities
• Identify, analyze, and report security policy violations, misconfigurations, and configuration drift
• Coordinate remediation efforts to ensure timely resolution of identified security risks
• Manage security incidents throughout the full lifecycle, from detection to remediation and closure
• Produce operational reports, security metrics, and activity summaries for internal stakeholders
• Maintain runbooks, technical documentation, and operational procedures
• Identify opportunities for automation and future auto-remediation capabilities
• Collaborate with Security, Platform, and Infrastructure teams to enhance cloud-native security operations and runtime protection
• Participate in on-call support rotations and respond to critical production security incidents

Nice to Have

• Google Cloud Associate Cloud Engineer certification
• Kubernetes certifications such as KCNA, CKA, or CKS
• Sysdig Certified Security Analyst certification

Additional Information

Location: Porto (Hybrid)

On-Call Requirement: Participation in an on-call rotation is required to support critical security incidents outside business hours

Travel: Flexibility for occasional travel across Europe for project deliveries and client meetings is required.