Security Delivery Senior Analyst

Accenture; Riyadh; Presencial; SAR 180.000 - 300.000; Jornada completa

Descripción de la vacante

Accenture PLC in Riyadh is seeking a Security Delivery Senior Analyst to own escalated security incidents, perform deep triage, investigation and analysis, and help develop stronger playbooks and incident response procedures.

You will work with SIEM administrators and security engineering to enhance detection use cases, SOPs, and runbooks, ensuring consistent incident handling across the SOC while communicating findings clearly.

Formación

• Experience in a Security Operations Center (SOC) or cybersecurity monitoring environment.
• Hands-on experience with security event triage, investigation and incident escalation.
• Understanding of Incident Response processes, SOC procedures and security runbooks.
• Experience using SIEM technologies.
• Ability to investigate and correlate security events and identify potentially malicious activity.
• Understanding of SIEM detection use cases and correlation rules.
• Strong analytical, troubleshooting and problem-solving capabilities.
• Strong written and verbal communication skills with attention to detail.

Responsabilidades

• Take ownership of security incidents and events escalated from L1 analysts and handle them according to defined SOC processes and procedures.
• Perform detailed triage, validation and investigation of detected events.
• Analyze and categorize events according to severity levels and runbooks.
• Correlate information to determine nature, scope and impact of activity.
• Escalate complex or high-risk incidents through appropriate channels.
• Maintain accurate investigation findings and incident documentation.
• Work with SIEM teams to develop and enhance monitoring use cases and detection logic.
• Contribute to SOPs, playbooks, and incident response plans.

Conocimientos

SOC operations

Incident triage

SIEM analysis

Investigation

Communication

Analytical thinking

Herramientas

SIEM

EDR

SOAR

Descripción del empleo

As a Security Delivery Senior Analyst, you will play a key role within Security Operations, taking ownership of security events escalated from L1 analysts and performing deeper triage, investigation and analysis. You will help ensure incidents are handled consistently according to established processes and runbooks, while contributing to stronger playbooks, incident response procedures and SIEM detection use cases.

What You’ll Do

Incident Triage & Investigation

• Take ownership of security incidents and events escalated from L1 analysts and handle them according to defined SOC processes and procedures.
• Perform detailed triage, validation and investigation of detected and escalated security events.
• Analyze and categorize events of interest according to agreed severity levels, escalation criteria and runbooks.
• Correlate available security information to determine the nature, scope and potential impact of suspicious activity.
• Escalate complex or high-risk incidents through the appropriate response channels where required.
• Maintain accurate investigation findings, evidence and incident documentation.

SIEM & Detection Support

• Work closely with SIEM administrators and security engineering teams to support the creation and enhancement of security-monitoring use cases.
• Provide investigation insights that can help identify opportunities to improve existing detection logic.
• Support testing and refinement of SIEM use cases based on operational security requirements.
• Identify potential detection gaps observed during incident investigations and raise them with the appropriate security teams.

SOC Procedures & Continuous Improvement

• Develop, maintain and continuously improve Standard Operating Procedures (SOPs), investigation playbooks and Incident Response plans.
• Help standardize investigation and triage practices to promote consistent incident handling across the SOC.
• Capture lessons learned from investigations and contribute to improvements in operational processes.
• Collaborate with L1 analysts and other security teams to support effective incident handling and knowledge sharing.

What You’ll Need

• Experience working within a Security Operations Center (SOC) or cybersecurity monitoring environment.
• Hands-on experience with security event triage, investigation and incident escalation.
• Good understanding of Incident Response processes, SOC procedures and security runbooks.
• Experience using Security Information and Event Management (SIEM) technologies.
• Ability to investigate and correlate security events and identify potentially malicious activity.
• Understanding of security alerts, event severity classification and escalation processes.
• Experience creating or maintaining SOPs, playbooks and Incident Response documentation.
• Understanding of SIEM detection use cases and correlation rules.
• Strong analytical, troubleshooting and problem-solving capabilities.
• Strong written and verbal communication skills with attention to detail.

Bonus Points If You Have

• Experience supporting SIEM use-case development or detection tuning.
• Exposure to EDR, SOAR, endpoint security or other security-monitoring technologies.
• Familiarity with MITRE ATT&CK and common attack techniques.
• Experience with threat hunting or deeper incident investigation.
• Relevant cybersecurity or SOC certifications.