This role pays more than
87%
of similar roles. Most pay
$166,631–$217,512
— the shaded band above.
At the midpoint, this role pays about
$235k
versus about
$192k
for comparable roles.
Based on 240 similar postings.
Employer
About Accenture
Accenture is a leading global professional services company specializing in IT, strategy, consulting, and operations, with a strong focus on digital transformation, cloud computing, and artificial intelligence.
Accenture currently has
192 open roles
on FindRole.
Listed pay typically runs
$94,400–$266,300
across 165 roles with salary data.
The Threat Informed Defense Senior Manager joins the security team to lead the technical and engineering core of a global cyber threat intelligence program serving mission-critical environments. This role focuses on transforming raw intelligence into actionable defensive outcomes by structuring, normalizing, and operationalizing threat data to drive detection, hunting, and response across managed security stacks. You will define how threat actors, campaigns, TTPs, malware, infrastructure, and telemetry are consumed across TIP, SIEM, SOAR, and EDR platforms. Key responsibilities include governing analytic tradecraft, implementing machine-consumable architectures at scale, and managing detection engineering using YARA and Sigma. Required expertise includes the MITRE ATT&CK framework, STIX/TAXII standards, and experience with telemetry from network, identity, cloud, and OT sources. You will oversee technical teams to bridge the gap between adversary actions and automated defensive responses.
Translate raw threat intelligence into actionable defensive outcomes across managed security stacks.
Structure and normalize threat data including TTPs, malware, and infrastructure for machine consumption.
Define how threat data is consumed across TIP, SIEM, SOAR, and EDR platforms.
Assess client defense capabilities and implement architectural standards to improve detection and response.
Govern analytic and engineering tradecraft to shorten the gap between adversary action and defense.
Manage technical teams and lead the execution of global cyber threat intelligence programs.
Develop telemetry pipelines and threat hunting programs across network, identity, cloud, and OT sources.
What we're looking for
Minimum of 10 years of experience in cyber threat intelligence, threat-informed defense, detection engineering, threat hunting, or security operations.
Minimum of 5 years leading technical teams, including managing other team leads or managers.
Minimum of 5 years of experience with the core security stack, including TIP, SIEM, SOAR, and EDR.
Minimum of 5 years of hands-on experience with structured threat data and the MITRE ATT&CK framework.
Minimum of 5 years of experience defining or governing data structures, schemas, or normalization standards across multiple tools.
Bachelor's degree in a relevant field, or equivalent professional experience (minimum 12 years for those without a degree).
Strong written and verbal communication skills to brief executive and client stakeholders.
Relevant certifications such as GCTI, GREM, GCFA, GDAT, GCDA, or CISSP are preferred.
Incident Response
Threat Intelligence
Digital Forensics
Malware Analysis
Splunk
Wireshark
Snort
Kali Linux
Sift
REMnux
Python
Java
C
TCP/IP
Windows
Agile
Network Security
Cybersecurity
Threat Intelligence
AI
Large Language Models
MITRE ATT&CK
Cyber Kill Chain
Diamond Model
Python
PowerShell
C#
C++
Reverse-engineering
Anomaly Detection
Vulnerability Research
Network Protocols
Incident Response
Identity and Access Management
Cloud Security
Application Security
Platform Security
Security Systems Engineering
SaaS
Zero Trust
NIST CSF
NIST 800-53
ISO 27001
SOC 2
Automation
System Integration
Data Governance