Senior SOC DFIR Engineer - Incident Response & SIEM Tuning

Accenture PLC; Riyadh; Presencial; SAR 240.000 - 420.000; Jornada completa

Descripción de la vacante

Accenture PLC in Riyadh is seeking an experienced SOC L3 (DFIR) Engineer who will act as a senior escalation point, leading complex incident investigations, performing digital forensics, and driving SIEM engineering to enhance detection capabilities.

You will mentor junior SOC analysts, develop and maintain incident response playbooks, and collaborate with CTI to integrate threat intelligence into detection workflows.

Formación

• 2–5 years of SOC experience at L3 level (DFIR).
• Hands-on incident response and digital forensics experience.
• Proficient with SIEM platforms and tuning (Splunk, Sentinel, QRadar).
• Knowledge of network protocols and ATT&CK framework.

Responsabilidades

• Lead complex incident investigations from detection to remediation.
• Perform digital forensics on endpoints, networks, and logs.
• Develop and tune SIEM use cases, rules, and alerts.
• Mentor L1/L2 analysts and prepare incident reports.

Conocimientos

Incident response leadership

Digital forensics

SIEM engineering

Threat intelligence integration

Mentoring junior analysts

Analytical communication

Herramientas

Splunk

Microsoft Sentinel

QRadar

Descripción del empleo

Accenture PLC in Riyadh is seeking an experienced SOC L3 (DFIR) Engineer who will act as a senior escalation point, leading complex incident investigations, performing digital forensics, and driving SIEM engineering to enhance detection capabilities.

You will mentor junior SOC analysts, develop and maintain incident response playbooks, and collaborate with CTI to integrate threat intelligence into detection workflows.