Security Delivery Consultant

About the Role

Accenture Saudi Arabia is seeking a Security Delivery Consultant to join its team in Riyadh. This full-time role focuses on enhancing clients' capabilities to detect, investigate, and respond to evolving cyber threats. The consultant will serve as a senior cybersecurity practitioner, supporting and improving Security Operations Center (SOC) functions across incident response, SIEM, endpoint detection and response (EDR), and network detection and response (NDR).

Key Responsibilities

• Develop, maintain, and enhance Incident Response plans, SOC policies, processes, procedures, and operational playbooks.
• Lead and support the investigation, analysis, and response to complex cybersecurity events and incidents.
• Analyze security events across multiple technologies and provide technical guidance to security analysts and engineering teams.
• Support the continuous development and maturity of Cybersecurity Operations Center processes and procedures.
• Provide technical leadership during investigations and escalations, including on-call support when required.
• Identify operational and detection gaps and recommend improvements to strengthen security monitoring and response.
• Work closely with SIEM engineers and cybersecurity teams to develop, refine, and optimize correlation and detection rules.
• Administer and optimize enterprise Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) technologies.
• Deploy, upgrade, and maintain EDR agents across Windows, macOS, and Linux environments.
• Produce high-quality cybersecurity intelligence, operational, and incident reports for technical and non-technical audiences.
• Communicate effectively with information security teams, technology stakeholders, business representatives, and senior management.
• Provide technical guidance and mentorship to security team members.

Qualifications and Experience

• Strong experience in Security Operations Center (SOC) environments and Incident Response.
• Demonstrated experience developing Incident Response plans, SOC policies, processes, procedures, and playbooks.
• Strong hands-on knowledge of Security Information and Event Management (SIEM) technologies, including developing, refining, and tuning correlation and detection rules.
• Hands-on expertise administering enterprise EDR technologies and deploying/maintaining EDR agents across Windows, macOS, and Linux.
• Experience administering NDR technologies and integrating NDR telemetry into broader security-monitoring environments.
• Strong understanding of security-event analysis, investigation, detection, and response.
• Experience integrating SIEM, EDR, NDR, and other cybersecurity technologies.
• Ability to provide hands-on technical leadership and guidance during complex security incidents.
• Ability to support operational escalations and participate in on-call support when required.

Required Skills

• Strong analytical, troubleshooting, and organizational capabilities.
• Excellent written and verbal communication skills, including the ability to convey technical and strategic cybersecurity matters to various organizational levels.

Preferred Certifications and Experience

• GIAC Certified Incident Handler (GCIH)
• GIAC Continuous Monitoring Certification (GMON)
• GIAC Certified Forensic Analyst (GCFA)
• Comparable industry-recognized cybersecurity or incident-response certifications.
• Experience working in large-scale or complex enterprise SOC environments.
• Experience supporting Managed Security Services.
• Exposure to detection engineering, threat hunting, and cyber threat intelligence.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within Accenture Security. The role involves guiding security teams through complex investigations and continuously improving detection, response, and security-monitoring capabilities.