Skip to content

Accenture

Sofia; Plovdiv; Bulgaria

Windows Security Operations Engineer

Posted yesterday

Level
Mid level
Experience
3+ years
Work style
Hybrid
Full-time
Area
Defence & SOC

At a glance

The role in plain English

This role focuses on securing and improving Windows environments, including servers, endpoints, Active Directory, and Azure/hybrid services. It suits experienced Windows security engineers who can automate, document, and manage remediation processes. Daily tasks involve hardening systems, managing GPOs, responding to vulnerabilities, and collaborating with various IT teams. Participation in a 24/7 on-call rotation is required to support critical security incidents.

What you'll do

  • Own and improve Windows hardening profiles and assess deviations
  • Design and maintain Group Policy Object (GPO) architecture
  • Remediate assigned Windows security findings end-to-end
  • Develop automation using PowerShell and Ansible/AWX
  • Participate in 24/7 on-call rotation for security events

What they're looking for

Essential

  • Bachelor's in Computer Science or related field
  • 3–5 years' Windows Server administration or security engineering
  • Active Directory architecture and hardening experience
  • Production-grade PowerShell and automation skills
  • Fluent English, verbal and written

Nice to have

  • Vulnerability remediation with Qualys or similar
  • Microsoft Intune security baselines experience
  • Microsoft Entra ID advanced features
  • Defender for Cloud and Servers knowledge

Core skills

  • Windows Server
  • Active Directory
  • PowerShell
  • Ansible/AWX
  • Azure
  • Intune
  • SIEM
  • ITSM

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

4/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

3/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your approach to hardening Windows Server environments.
  2. 02How do you manage and troubleshoot complex GPO deployments?
  3. 03Explain your process for automating remediation using PowerShell or Ansible.
  4. 04How would you handle a critical security incident during an on-call shift?

About Accenture

Accenture is a global professional services company offering digital, cloud, and security services to clients in over 120 countries.

Full job descriptionAs published by Accenture

Accenture i s a global professional services company with leading capabilities in digital, cloud, and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 740,000+ people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries.

We are looking for a hands-on Security Engineer to protect and continuously improve Windows environments across Windows Server, Active Directory, endpoints, and Azure/hybrid services. You will translate vulnerability findings, alert data, and security-policy requirements into tested, automated, and auditable improvements — working alongside IAM, platform, cloud, and DevOps teams.

The role combines deep technical engineering with managed-service discipline: clear ownership, transparent communication, and verifiable outcomes delivered within customer governance processes.

This role participates in on-call rotations to provide 24/7 coverage for critical security events.

To keep it short, below are some key responsibilities:

  • Own Windows hardening profiles for servers, endpoints, and Active Directory; assess deviations, implement through the change process, and verify control effectiveness.
  • Design and maintain GPO architecture including staged deployment, conflict analysis, change control, and rollback procedures.
  • Own end-to-end remediation for assigned Windows findings: validate, prioritize by severity and exposure, remediate, rescan, and capture formal closure evidence.
  • Provide technical input for risk exceptions and compensating controls; perform trend analysis to identify systemic weaknesses.
  • Own Microsoft Intune and MDE policy, compliance, enrollment, integration, sensor health, and complex troubleshooting.
  • Convert lessons learned into hardening improvements, detection contributions, automation, and runbook updates.
  • Develop production-quality PowerShell and Ansible/AWX automation with version control, peer review, structured error handling, and secure credential management.

Manage assigned work by risk, priority, SLA, and customer maintenance window; keep tickets, runbooks, and handovers accurate and current.

Requirements and technical knowledge:

  • Bachelor's degree in Computer Science, Information Security, Information Technology, or a closely related technical field.
  • 3–5 years of hands-on experience in a Windows Server system administration and troubleshooting and/or security engineering role - services, registry, permissions, event logs, Defender Firewall, BitLocker, and secure remote management.
  • Active Directory architecture: Forests, domains, trusts, GPOs, Kerberos/NTLM, DC hardening, gMSA, LAPS, privileged access, and recovery.
  • Endpoint & server security: MDE or similar EDR onboarding, policies, alerts, exclusions, sensor health, and troubleshooting.
  • Automation engineering: Production-grade PowerShell, Ansible/AWX, Git, secure credentials, error handling, rollback, and peer review.
  • Azure/hybrid fundamentals: Entra ID, hybrid identity, Azure RBAC, network and monitoring dependencies, and shared responsibility.
  • Logging & investigation: Windows and PowerShell logs plus SIEM tools such as Splunk for triage and containment.
  • ITSM & change management: Incident, problem, change, and request processes, including risk, testing, rollback, and evidence.

Bonus points if you have:

  • Vulnerability remediation: End-to-end lifecycle using Qualys or comparable: finding validation, risk prioritization, remediation, exceptions, rescanning, and formal closure evidence.
  • Microsoft Intune security baselines for cloud-managed Windows.
  • Microsoft Entra ID: Conditional Access, PIM, access reviews, hybrid join, and sync.
  • Defender for Cloud and Servers: posture and workload protection.
  • Windows LAPS, Credential Guard, BitLocker, Application Control, and ASR.
  • PKI and AD CS: certificate authentication and TLS troubleshooting.
  • Forensics and threat hunting.

The Rest of the qualities, you know them:

  • Fluent in English, both verbal and written.
  • Excellent communication skills and ability to collaborate effectively within a team.

Benefits:

  • Certification
  • Career Counselling
  • 25 day paid vacation
  • Flexible home office policy
  • Options to buy shares
  • Luxury health & dental insurance
  • Food vouchers
  • Multisport cards
  • Employee Assistance Program

#LI-EU

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.

  • Accenture

    New

    SOC Engineer

    Malaga, I+D6 - South Building; Spain · On-site

    Install, configure, and maintain SIEM/SOAR components for a 24x7 SOC, onboard log sources, troubleshoot parsing issues, and support detection engineering. Requires experience with SIEM platforms and working in a SOC environment.

    Mid levelSIEMSOARLog management
  • Athens; Greece · On-site

    Design, implement, and maintain secure cloud infrastructure across multi-cloud environments, collaborating with architecture and DevOps teams. Requires strong cloud security engineering experience and hands-on implementation in production environments.

    SeniorCloud securityAWSAzure
  • Sofia and 2 more · Hybrid

    Monitor and respond to security threats on Linux systems, investigate incidents, implement hardening standards, and maintain compliance. Requires experience with Linux security and participation in 24/7 on-call rotations.

    Mid levelLinux administrationIncident responseSIEM
  • NVIDIA

    Posted 3 days ago

    Insider Threat Detection Engineer

    US, CA, Remote and 6 more

    Investigate and detect insider threats by building and tuning detections, leading investigations, and developing automation across identity, endpoint, and cloud systems. Requires coding skills and experience handling sensitive information.

    Mid levelInsider threatDetection engineeringSecurity investigations

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

No spam · 100% free · Unsubscribe anytime