Threat Informed Defense Senior Manager

Accenture•St. Louis, MO

1d•$112,900 - $338,300•Hybrid

About The Position

Accenture Security helps organizations prepare, protect, detect, respond to, and recover, at all points of the security lifecycle. We hire the very best security talent and arm them with the coolest tools and latest tech so they can help our clients build resilience as we create integrated, customized turnkey solutions. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle. This role is an exciting opportunity to lead, influence, and execute on the technical and engineering core of a global cyber threat intelligence program serving mission-critical industry environments. As the Threat Informed Defense Senior Manager, you will own the capability that turns intelligence into defensive outcomes — structuring, normalizing, and operationalizing threat data so it drives detection, hunting, and response across Accenture's managed security stacks and those of our clients. In this role, you will define how threat actors, campaigns, TTPs, malware, infrastructure, indicators, and telemetry are structured and consumed across TIP, SIEM, SOAR, and EDR. You will assess client and program defensive capabilities, recommend improvements, and implement the architecture and standards that make intelligence machine-consumable at enterprise scale. You'll have the opportunity to structure threat intelligence programs, govern analytic and engineering tradecraft, and continuously shorten the gap between adversary action and defensive response.

Requirements

Minimum of 10 years of experience across cyber threat intelligence, threat-informed defense, detection engineering, threat hunting, or security operations, with demonstrated technical depth in at least two of these areas.
Minimum of 5 years leading technical teams, including experience managing other team leads or managers (second-line leadership).
Minimum of 5 years of experience and demonstrated working knowledge of the core security stack — TIP, SIEM, SOAR, and EDR — and how intelligence and detection content is operationalized across them.
Minimum of 5 years of hands-on experience with structured threat data and the MITRE ATT&CK framework, including modeling threat actors, campaigns, TTPs, malware, and infrastructure as related objects.
Minimum of 5 years of experience defining or governing data structures, schemas, or normalization standards that span multiple tools or teams.
Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)
Strong written and verbal communication skills, including the ability to brief executive and client stakeholders and to report status, risk, and blockers clearly to senior leadership.
Bachelor's degree in a relevant field, or equivalent professional experience.

Nice To Haves

Advanced degree in computer science, cybersecurity, data engineering, or a related discipline.
Direct experience designing or owning a central data model, data fabric, or common data schema for a security or intelligence program.
Practical familiarity with threat-informed defense methodologies and frameworks (e.g., MITRE ATT&CK, D3FEND, MITRE Threat-Informed Defense) and the threat profile → threat modeling → detection → hunting → response lifecycle.
Working knowledge of STIX/TAXII and intelligence interchange standards.
Experience in an MxDR/MDR or incident response consulting environment, ideally at global scale.
Exposure to telemetry across diverse data sources — EDR, network, identity, cloud, and OT.
Familiarity with relevant regulatory and reporting contexts (e.g., NIS2, DORA) as they affect intelligence and detection requirements.
Relevant certifications such as GCTI, GREM, GCFA, GDAT, GCDA, or CISSP.
Published threat research, detection content, or open-source contributions to the security community

Responsibilities

Own the capability that turns intelligence into defensive outcomes — structuring, normalizing, and operationalizing threat data so it drives detection, hunting, and response across Accenture's managed security stacks and those of our clients.
Define how threat actors, campaigns, TTPs, malware, infrastructure, indicators, and telemetry are structured and consumed across TIP, SIEM, SOAR, and EDR.
Assess client and program defensive capabilities, recommend improvements, and implement the architecture and standards that make intelligence machine-consumable at enterprise scale.
Structure threat intelligence programs, govern analytic and engineering tradecraft, and continuously shorten the gap between adversary action and defensive response.