Linux Security Operations Engineer

Accenture i

s a global professional services company with leading capabilities in digital, cloud, and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 740,000+ people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries.

We are seeking an experienced and highly motivated Linux Security Operations Engineer to join our Security Operations Center (SOC). In this role, you will be responsible for safeguarding our Linux-based infrastructure, detecting and responding to security threats, implementing hardening standards, and maintaining compliance across production environments.

You will work closely with the Security Delivery Project Manager, DevOps, IT infrastructure, and risk management teams to proactively identify vulnerabilities, investigate security incidents, and drive continuous improvement of our security posture. The position is equally suited for internal candidates looking to grow within our security function and external professionals with a strong Linux security background.

This role participates in on-call rotations to provide 24/7 coverage for critical security events.

To keep it short, below are some key responsibilities:

Monitor Linux-based systems, servers, and network infrastructure using SIEM tools (e.g., Splunk, Tanium) for anomalous activity, intrusion attempts, and policy violations.

Investigate, triage, and respond to security incidents involving Linux endpoints and servers, following established IR playbooks and escalation procedures. Perform RCA on security events and produce detailed post-incident reports with remediation recommendations.

Implement and maintain OS-level security hardening baselines for Linux distributions (RHEL, CentOS, Ubuntu, Debian).

Manage and audit security configurations using infrastructure-as-code tools such as Ansible, Puppet.

Conduct regular vulnerability scans of Linux systems using tools such as Nessus or Qualys, and prioritize remediation based on risk severity.

Evaluate CVEs and security advisories (e.g., from NVD, RedHat, Ubuntu Security) for applicability to the environment and communicate risk to stakeholders.

Administer and audit user accounts, sudo privileges, SSH key management, configurations across Linux infrastructure.

Configure and maintain centralized logging pipelines for Linux systems using syslog-ng, rsyslog, Fluentd, or the Elastic Stack (ELK).

Conduct proactive threat hunting based on threat intelligence feeds.

Support compliance, external and internal audits

Maintain accurate and up-to-date documentation

Requirements and technical knowledge:

Bachelor's degree in Computer Science, Information Security, Information Technology, or a closely related technical field.

3–5 years of hands-on experience in a Linux system administration or security engineering role.

Demonstrated experience with incident detection and response in Linux environments.

Strong working knowledge of at least two major Linux distributions: RHEL/CentOS, Ubuntu, Debian, or SUSE.

Experience with scripting for security automation (Bash, Python, or equivalent).

Deep understanding of Linux security architecture: kernel security modules, namespaces, cgroups, capabilities, and seccomp profiles.

Good understanding of security tools: Nessus/Qualys (vulnerability scanning), Fail2ban, iptables/nftables/firewalld.

Understanding of network protocols and traffic analysis tools (Wireshark, tcpdump, Zeek/Bro).

Bonus points if you have:

Hands-on experience with SIEM platforms (Splunk, Elastic SIEM, or similar) for log analysis and alerting.

Familiarity with container security (Docker, Kubernetes) and securing containerized Linux workloads.

Professional certifications :

CompTIA Security+ or CompTIA Linux+

RHCSA / RHCE (Red Hat Certified System/Security Administrator)

Certified Information Systems Security Professional (CISSP)

GIAC Certified Enterprise Defender (GCED) or GIAC Security Essentials (GSEC)

Certified Ethical Hacker (CEH) or Offensive Security Certified Professional (OSCP) — advantageous

The Rest of the qualities, you know them:

Fluent in English, both verbal and written.

Excellent communication skills and ability to collaborate effectively within a team.

Benefits:

Certification

Career Counselling

25 day paid vacation

Flexible home office policy

Options to buy shares

Luxury health & dental insurance

Food vouchers

Multisport cards

Employee Assistance Program