Skip to content

Accenture

Prague; Czech Republic

SOC L1 Analyst / Investigator #CFCPrague

Posted 5 days ago

Level
Graduate & entry level
Experience
None required
Work style
On-site
Full-time
Area
Defence & SOC

At a glance

The role in plain English

This entry-level Security Operations Center (SOC) Analyst role involves monitoring client environments for security alerts, performing initial triage and investigation, and escalating incidents as needed. It suits candidates with basic IT knowledge, strong analytical skills, and an interest in cybersecurity. The position requires shift work as part of a 24x7 team, following established procedures and documenting incidents accurately.

What you'll do

  • Monitor security alerts from SIEM and detection systems
  • Perform initial triage and investigation of alerts
  • Escalate potential incidents to L2/L3 or clients
  • Document findings, actions, and escalation details
  • Follow playbooks for investigation and containment

What they're looking for

Essential

  • Legal right to work in Czech Republic
  • Willingness to work 24x7 shifts
  • Knowledge of Windows and Unix/Linux systems
  • Understanding of networking protocols and technologies
  • Proficiency in written and spoken English

Nice to have

  • 1+ years SIEM experience (e.g. QRadar, Splunk)
  • Knowledge of security principles and techniques
  • Programming or scripting skills
  • Customer service or support experience

Core skills

  • SIEM
  • Log analysis
  • Incident triage
  • Windows
  • Linux
  • Networking
  • English

The shape of the job

Technical depth

2/5

FoundationalSpecialist

Pace

4/5

SteadyFast-moving

Ownership

2/5

GuidedSelf-directed

Teamwork

3/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01How would you prioritise multiple simultaneous security alerts?
  2. 02Describe your approach to investigating a suspicious log entry.
  3. 03What steps would you take if you identify a false positive?
  4. 04How do you ensure accurate documentation during incident handling?

About Accenture

Accenture Cyber Fusion Center in Prague provides cybersecurity services, including 24x7 SOC monitoring, to global clients.

Full job descriptionAs published by Accenture

About us

Accenture Cyber Fusion Center in Prague is a unique multidisciplined team of more than 240 people passionate about Cyber Security. As part of Accenture Security we support clients globally to prepare for and defend against the rapidly changing capabilities of cyber attackers. We are looking for security professionals to join our international team at our custom-built location.

SOC team provides 24x7 alert monitoring and analysis to detect suspicious activity in our clients’ environments allowing promptly response and remediation of security incidents. #LI-EU

Role summary

Security Operations Analysts monitor client environment for any alerts from SIEM and other detection systems. They perform triage and basic investigation of generated alerts escalating potential security incidents to the clients.

In particular, the Security Operations Center, (SOC) L1 Analyst:

  • Performs initial validation and prioritization of alerts based on severity, impact, and confidence.
  • Conducts basic log and event analysis across SIEM, EDR, and related security tools.
  • Follows documented playbooks and runbooks for investigation, containment support, and escalation.
  • Creates and maintains accurate incident records including findings, actions taken, and escalation details.
  • Supports 24x7 monitoring and shift handover activities to ensure continuity of operations.
  • Identifies and reports false positives, recurring issues, and tuning opportunities to improve detection quality.
  • Escalates suspected threats in a timely manner to L2/L3 or client stakeholders in line with SLAs.
  • Monitors and maintains SLA compliance by ensuring alerts and incidents are handled within agreed timelines and escalated appropriately when required.
  • Verifies and maintains the necessary access to security tools and platforms and promptly escalate any access-related issues to avoid operational impact.

Requirements

  • Legal right to work in the Czech Republic and, where applicable, free access to the Czech labour market.
  • Readiness to work on shifts providing 24x7 monitoring service.
  • Knowledge of IT technologies - Windows and Unix/Linux operating systems, Networking protocols and technologies, e.g. TCP/IP, Firewalls, Routers, etc.
  • Interest in developing skills in Cybersecurity, willingness to learn and improve.
  • Analytical skills, ability to manage multiple tasks.
  • Proficiency in written and spoken English

Nice to have

  • 1+ years of experience with Security Information and Event Management (SIEM) tools like QRadar, Splunk, ArcSight etc.
  • Knowledge of Security principles, techniques and technologies
  • Programming and scripting skills
  • Experience working in a customer service or support environment

What we offer

  • Become a part of the Prague SOC team consisting of about 110 team members.
  • Opportunity to work on SOC projects delivered to our global TOP 500 clients.
  • Get real-life experience working with the globally-recognized SIEM solutions like Splunk, Microsoft Azure Sentinel and QRadar.
  • Witness, investigate and help to stop real-life security incidents.
  • Professional training and certification.

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.

  • Accenture

    Posted 3 days ago

    Senior Cloud Security Engineer

    Athens; Greece · On-site

    Design, implement, and maintain secure cloud infrastructure across multi-cloud environments, collaborating with architecture and DevOps teams. Requires strong cloud security engineering experience and hands-on implementation in production environments.

    SeniorCloud securityAWSAzure
  • Accenture

    Posted 3 days ago

    SOC Engineer

    Malaga, I+D6 - South Building; Spain · On-site

    Install, configure, and maintain SIEM/SOAR components for a 24x7 SOC, onboard log sources, troubleshoot parsing issues, and support detection engineering. Requires experience with SIEM platforms and working in a SOC environment.

    Mid levelSIEMSOARLog management
  • Accenture

    Posted 3 days ago

    Linux Security Operations Engineer

    Sofia and 2 more · Hybrid

    Monitor and respond to security threats on Linux systems, investigate incidents, implement hardening standards, and maintain compliance. Requires experience with Linux security and participation in 24/7 on-call rotations.

    Mid levelLinux administrationIncident responseSIEM

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

No spam · 100% free · Unsubscribe anytime