Senior Security Delivery Analyst: SOC Incident Response

Accenture PLC; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Accenture PLC in Riyadh, Saudi Arabia, seeks a Security Delivery Senior Analyst to own security incidents escalated from L1 analysts and perform deep triage, investigation and analysis within the SOC. You will help ensure consistent handling according to runbooks and contribute to improved playbooks and incident response procedures.

You will work with SIEM administrators and security engineering teams to enhance detection use cases, refine SIEM logic, and support testing and refinement of SOC

Qualifications

• Experience in a Security Operations Center (SOC) or cybersecurity monitoring environment.
• Hands-on experience with security event triage, investigation and incident escalation.
• Understanding of Incident Response processes, SOC procedures and runbooks.
• Experience using Security Information and Event Management (SIEM) technologies.
• Ability to investigate and correlate security events and identify potentially malicious activity.

Responsibilities

• Own security incidents and events escalated from L1 analysts and handle them per SOC processes.
• Perform detailed triage, validation and investigation of detected security events.
• Analyze and categorize events by severity levels and runbooks.
• Correlate security information to determine scope and impact, escalate high-risk incidents.
• Maintain accurate investigation findings and incident documentation.

Skills

SOC operations

Incident triage

SIEM

Investigation

Documentation

Tools

SIEM tools

EDR

SOAR

Job description

Accenture PLC in Riyadh, Saudi Arabia, seeks a Security Delivery Senior Analyst to own security incidents escalated from L1 analysts and perform deep triage, investigation and analysis within the SOC. You will help ensure consistent handling according to runbooks and contribute to improved playbooks and incident response procedures.

You will work with SIEM administrators and security engineering teams to enhance detection use cases, refine SIEM logic, and support testing and refinement of SOC