Linux Security Operations Engineer
Accenture Bulgaria
над 300 служителя
Linux Security Operations Engineer
Sofia
длъжност на пълно работно време

Linux Security Operations Engineer

Sofia длъжност на пълно работно време

Описание на позицията

Accenture is a global professional services company with leading capabilities in digital, cloud, and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 740,000+ people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries.

We are seeking an experienced and highly motivated Linux Security Operations Engineer to join our Security Operations Center (SOC). In this role, you will be responsible for safeguarding our Linux-based infrastructure, detecting and responding to security threats, implementing hardening standards, and maintaining compliance across production environments.

You will work closely with the Security Delivery Project Manager, DevOps, IT infrastructure, and risk management teams to proactively identify vulnerabilities, investigate security incidents, and drive continuous improvement of our security posture. The position is equally suited for internal candidates looking to grow within our security function and external professionals with a strong Linux security background.
This role participates in on-call rotations to provide 24/7 coverage for critical security events.

To keep it short, below are some key responsibilities:
• Monitor Linux-based systems, servers, and network infrastructure using SIEM tools (e.g., Splunk, Tanium) for anomalous activity, intrusion attempts, and policy violations.

• Investigate, triage, and respond to security incidents involving Linux endpoints and servers, following established IR playbooks and escalation procedures. Perform RCA on security events and produce detailed post-incident reports with remediation recommendations.

• Implement and maintain OS-level security hardening baselines for Linux distributions (RHEL, CentOS, Ubuntu, Debian).

• Manage and audit security configurations using infrastructure-as-code tools such as Ansible, Puppet.

• Conduct regular vulnerability scans of Linux systems using tools such as Nessus or Qualys, and prioritize remediation based on risk severity.

• Evaluate CVEs and security advisories (e.g., from NVD, RedHat, Ubuntu Security) for applicability to the environment and communicate risk to stakeholders.

• Administer and audit user accounts, sudo privileges, SSH key management, configurations across Linux infrastructure.

• Configure and maintain centralized logging pipelines for Linux systems using syslog-ng, rsyslog, Fluentd, or the Elastic Stack (ELK).

• Conduct proactive threat hunting based on threat intelligence feeds.

• Support compliance, external and internal audits

• Maintain accurate and up-to-date documentation

Requirements and technical knowledge:
  • Bachelor's degree in Computer Science, Information Security, Information Technology, or a closely related technical field.
  • 3–5 years of hands-on experience in a Linux system administration or security engineering role.
  • Demonstrated experience with incident detection and response in Linux environments.
  • Strong working knowledge of at least two major Linux distributions: RHEL/CentOS, Ubuntu, Debian, or SUSE.
  • Experience with scripting for security automation (Bash, Python, or equivalent).
  • Deep understanding of Linux security architecture: kernel security modules, namespaces, cgroups, capabilities, and seccomp profiles.
  • Good understanding of security tools: Nessus/Qualys (vulnerability scanning), Fail2ban, iptables/nftables/firewalld.
  • Understanding of network protocols and traffic analysis tools (Wireshark, tcpdump, Zeek/Bro).
Bonus points if you have:
  • Hands-on experience with SIEM platforms (Splunk, Elastic SIEM, or similar) for log analysis and alerting.
  • Familiarity with container security (Docker, Kubernetes) and securing containerized Linux workloads.
  • Professional certifications :
    • CompTIA Security+ or CompTIA Linux+
    • RHCSA / RHCE (Red Hat Certified System/Security Administrator)
    • Certified Information Systems Security Professional (CISSP)
    • GIAC Certified Enterprise Defender (GCED) or GIAC Security Essentials (GSEC)
    • Certified Ethical Hacker (CEH) or Offensive Security Certified Professional (OSCP) — advantageous
The Rest of the qualities, you know them:
  • Fluent in English, both verbal and written.
  • Excellent communication skills and ability to collaborate effectively within a team.
Benefits:
  • Certification
  • Career Counselling
  • 25 day paid vacation
  • Flexible home office policy
  • Options to buy shares
  • Luxury health & dental insurance
  • Food vouchers
  • Multisport cards
  • Employee Assistance Program

#LI-EU

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com

Equal Employment Opportunity Statement
We believe that no one should be discriminated against because of their differences.?All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law.?Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.