Security Operations Lead

<div class="content-intro"><div> <div>&nbsp;</div> <div>At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.&nbsp;</div> <div>&nbsp;</div> <div>Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.&nbsp;</div> <div>&nbsp;</div> <div>Join us to drive positive, lasting change that moves missions and the government forward!</div> <div>&nbsp;</div> </div></div><p><strong>Security Operations Lead (SOC Lead)</strong></p> <p><strong>Role Summary</strong></p> <p>The Security Operations Lead will oversee all SOC functions and lead a blended team of SOC Analysts and Security Engineers to ensure rapid detection, investigation, and response to security threats. This role is responsible for driving threat hunting, leading major incidents, engineering detection capabilities, and maturing SOC operations to stay ahead of evolving adversary behaviors. The Lead acts as the central coordination point during security events and sets the strategic direction for the SOC to ensure continuous, mission-critical security coverage.</p> <p><strong>Key Responsibilities</strong></p> <p><strong>SOC Leadership &amp; Operations</strong></p> <ul> <li>Lead day‑to‑day SOC operations, including queue management, alert triage oversight, escalation handling, on‑call rotations, and daily situational reporting.</li> <li>Mentor and develop SOC analysts across tiers; refine SOPs, workflows, and response playbooks.</li> <li>Drive threat hunting activities focused on identifying patterns, outliers, and TTP‑aligned behaviors across host, network, email, and cloud logs.</li> <li>Oversee SIEM dashboarding, alert tuning, log source health, and rule/correlation development to strengthen detection depth.</li> <li>Coordinate with Security Engineering to ensure logging fidelity, sensor coverage, and integration of new technologies.</li> </ul> <p><strong>Incident Response</strong></p> <ul> <li>Lead the full lifecycle of incident response: identification, containment, eradication, recovery, forensics support, and post-incident reporting.</li> <li>Perfo