SOC Manager

Accenture Middle East; Riyadh; Hybrid; SAR 300,000 - 540,000; Full time

Job summary

Accenture Middle East is seeking a Cybersecurity Service Delivery Manager to drive SIEM logging and security monitoring enablement across large enterprise environments. You will combine deep SIEM expertise with delivery leadership to onboard, normalize, and validate data for threat detection and monitoring.

You will collaborate with cybersecurity, application, infrastructure, and engineering teams to translate monitoring needs into logging strategies, manage onboarding initiatives, address

Qualifications

• Bachelor's degree in CS/IS/Engineering required.
• 15 years of education required.
• Strong hands-on SIEM experience, preferably Splunk.

Responsibilities

• Lead end-to-end SIEM log source assessment, onboarding and validation in enterprise environments, with a preference for Splunk.
• Define and govern logging requirements aligned to security monitoring and threat detection.
• Oversee log onboarding activities: source identification, ingestion, parsing, field extraction, normalization, validation.
• Assess log sources for quality, identify gaps, and recommend remediation actions.
• Ensure critical events and fields are captured for monitoring and detection teams.
• Provide technical direction for log ingestion, mapping, and data-quality challenges.
• Coordinate with application, infrastructure, platform, and cybersecurity teams to enable logging capabilities.
• Lead delivery through phased onboarding approaches, balancing priorities and readiness.
• Own delivery planning, progress tracking, risk management, and stakeholder reporting.

Skills

SIEM expertise

Log onboarding

Delivery leadership

Stakeholder mgmt

Security monitoring

Education

Bachelor's degree in Computer Science / Information Security / Engineering

15 years of full-time education

Tools

Splunk

Job description

Accenture Technology Overview

Accenture Security helps organizations build cyber resilience through industry‑leading security services, advanced technologies, and deep industry expertise. Our Cyber Defense capabilities support organizations in protecting critical assets, strengthening security operations, and enabling effective threat detection and response across complex enterprise environments.

Job Summary

As a Cybersecurity Service Delivery Manager, you will lead the delivery of SIEM logging and security monitoring enablement across complex enterprise environments. You will combine strong technical expertise in SIEM and log management with delivery leadership, ensuring security‑relevant data is onboarded, normalized, validated, and optimized to support threat detection and monitoring objectives.

You will work closely with cybersecurity, application, infrastructure, and engineering teams to translate monitoring requirements into actionable logging strategies, drive structured onboarding initiatives, resolve data‑quality challenges, and provide stakeholders with clear visibility into delivery progress, risks, and outcomes.

Additional Key Responsibilities

SIEM & Logging Delivery

• Lead end‑to‑end log source assessment, onboarding, and validation activities within enterprise SIEM platforms, with a preference for Splunk environments.
• Define and govern logging requirements aligned to security monitoring, threat detection, and investigation use cases.
• Oversee log onboarding activities including source identification, ingestion, parsing, field extraction, normalization, and validation.
• Assess log sources for quality, completeness, consistency, and security value, identifying gaps and recommending remediation actions.
• Ensure required security events and critical fields are accurately captured and made available for monitoring and detection teams.

Technical & Delivery Leadership

• Provide technical direction and troubleshooting support for complex log ingestion, parsing, mapping, and data‑quality challenges.
• Apply expertise in common logging protocols and formats including Syslog, JSON, Windows Event Logs, and application logs.
• Establish consistent approaches for security data normalization and standardization across diverse technology environments.
• Collaborate with detection engineering teams to ensure telemetry supports defined monitoring and detection use cases.
• Coordinate dependencies across application, infrastructure, platform, and cybersecurity teams to enable required logging capabilities.
• Lead delivery through phased, wave‑based, or batch‑based onboarding approaches while balancing priorities, dependencies, and technical readiness.

Service Management & Governance

• Own delivery planning, progress tracking, risk management, issue resolution, dependency management, and stakeholder reporting.
• Establish quality criteria and ensure onboarding outputs meet defined technical and operational requirements.
• Produce high‑quality assessments, onboarding documentation, status reports, and executive‑level updates.
• Facilitate workshops and working sessions to resolve delivery blockers and maintain project momentum.
• Identify opportunities to enhance onboarding processes, logging standards, monitoring coverage, and operational efficiency.
• Serve as a trusted advisor and coordination point between cybersecurity teams and technology stakeholders.

Education

• Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field.
• 15 years of full‑time education required.
• Strong hands‑on understanding of SIEM technologies, preferably Splunk.
• Demonstrated experience with log onboarding, ingestion pipelines, parsing, and field extraction.
• Strong understanding of security logging across operating systems, applications, network devices, and security technologies.
• Knowledge of common log formats and protocols including Syslog, JSON, and Windows Event Logs.
• Experience assessing and improving log quality, completeness, consistency, and operational effectiveness.
• Experience defining logging requirements to support security monitoring and threat detection use cases.
• Working knowledge of detection engineering and the role of telemetry in effective security monitoring.
• Understanding of security data normalization, standardization, and mapping methodologies.
• Strong analytical, troubleshooting, and problem‑solving capabilities related to ingestion and data‑quality issues.
• Experience coordinating with application, infrastructure, platform, and cybersecurity teams.
• Experience managing structured, phased, or batch‑based technology delivery initiatives.
• Strong documentation, reporting, and presentation skills.
• Excellent stakeholder management and communication capabilities, including the ability to translate technical challenges into business impacts.
• Experience leading cross‑functional teams and working within complex enterprise environments.

Preferred Qualifications

• Experience delivering SIEM or security monitoring solutions within large‑scale enterprise environments.
• Experience with Splunk administration, SPL, data models, and Common Information Model (CIM).
• Exposure to Security Operations Center (SOC) operations, threat detection, incident investigation, or threat hunting.
• Experience working within cloud and hybrid technology environments.
• Familiarity with the MITRE ATT&CK Framework and security monitoring methodologies.
• Relevant cybersecurity, SIEM, Splunk, or service management certifications.
• Experience operating within a Managed Security Services environment.