Security Delivery Consultant

About the Role

Accenture Middle East is seeking a Security Delivery Consultant to join their team in Riyadh, Riyadh. This full-time role involves strengthening clients' ability to detect, investigate, and respond to evolving cyber threats. The consultant will serve as a senior cybersecurity practitioner, enhancing Security Operations Center capabilities across various domains.

Key Responsibilities

The Security Delivery Consultant will combine technical expertise with analytical and leadership skills to guide security teams and improve security monitoring and response. Responsibilities include:

• Developing and enhancing Incident Response plans, SOC policies, processes, and playbooks.
• Leading investigations, analysis, and response to complex cybersecurity incidents.
• Analyzing security events across multiple technologies and providing technical guidance.
• Supporting the continuous development of Cybersecurity Operations Center processes.
• Providing technical leadership during investigations and escalations, including on-call support.
• Identifying operational and detection gaps and recommending improvements.

SIEM and Detection Engineering

This role involves close collaboration with SIEM engineers and cybersecurity teams to optimize detection capabilities. Key tasks include:

• Developing, refining, and optimizing correlation and detection rules.
• Analyzing security telemetry to identify suspicious behavior and emerging threats.
• Supporting the integration of EDR, NDR, and other security technologies with SIEM platforms.
• Developing and tuning custom correlation rules to enhance detection effectiveness.
• Translating threat and incident insights into actionable recommendations.

Endpoint and Network Security Management

The consultant will administer and optimize endpoint and network detection and response technologies. This includes:

• Administering and optimizing enterprise Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) technologies.
• Deploying, upgrading, and maintaining EDR agents across various operating systems.
• Monitoring EDR agent health and troubleshooting related issues.
• Developing, maintaining, and optimizing EDR and NDR policies and configurations.
• Integrating EDR and NDR capabilities with SIEM and other cybersecurity platforms.
• Assessing existing configurations and recommending enhancements for security coverage.
• Managing and coordinating technical support cases with EDR and NDR vendors.

Cyber Intelligence and Stakeholder Engagement

This role requires strong communication skills to report on cybersecurity intelligence and engage with various stakeholders. Responsibilities include:

• Producing high-quality cybersecurity intelligence, operational, and incident reports for diverse audiences.
• Translating complex cybersecurity findings into clear risks, impacts, and recommended actions.
• Communicating effectively with information security teams, technology stakeholders, business representatives, and senior management.
• Providing technical guidance and mentorship to security team members.
• Collaborating across security, infrastructure, network, and technology teams to resolve security issues.

Experience Required

Candidates should possess 5-10 years of relevant experience in cybersecurity roles, demonstrating proficiency in the areas outlined above.