Security Managed Services specialist📣 إعلان

منذ ساعة واحدة تقريباً

	نوع العقد	دوام كامل
	طبيعة الوظيفة	بالموقع
	الموقع	الرياض

وصف الوظيفة

About Accenture Saudi Arabia

Accenture is a global professional services company that assists businesses, governments, and organizations in building their digital core, optimizing operations, accelerating revenue growth, and enhancing citizen services. With approximately 791,000 employees serving clients in over 120 countries, Accenture leverages technology, cloud, data, and AI, combined with industry experience and functional expertise, to deliver value. The company offers a broad range of services across Strategy & Consulting, Technology, Operations, Industry X, and Song, focusing on creating 360° value for clients, shareholders, partners, and communities.

Role Overview: Security Managed Services Specialist

Accenture Saudi Arabia is seeking a full-time Security Managed Services Specialist in Riyadh. This role involves contributing to cybersecurity operations, incident response, and the administration of security technologies. The specialist will work on developing and refining security processes, managing security tools, and providing technical guidance to team members.

Key Responsibilities

Develop and refine cybersecurity center processes and procedures, including incident response plans and SOC policies.
Work with SIEM engineers and other security teams to develop and refine correlation rules within Security Information and Event Management (SIEM) systems.
Utilize IR tools and solutions for detection, investigation, and response, analyzing security events and providing guidance to team members.
Produce cyber intelligence reports, communicating technical issues to various audiences including information security staff, non-technical business representatives, and senior management.
Administer Endpoint Detection and Response (EDR) technology, including deploying, upgrading, and maintaining EDR agents across Windows, macOS, and Linux.
Monitor EDR agent health, troubleshoot reporting issues, and develop and manage EDR policies.
Integrate EDR with SIEM and other security tools.
Administer Network Detection and Response (NDR) technology, developing and managing NDR policies, and integrating NDR with SIEM and other security tools.
Create and add custom correlation rules for EDR/NDR, and periodically review existing configurations to propose enhancements.
Manage support tickets with EDR/NDR support as necessary.

Required Skills and Qualifications

Experience in incident response planning and knowledge of SOC policies, processes, and procedures.
Proficiency in Security Information and Event Management (SIEM) systems.
Experience with IR tools and solutions related to detection, investigation, and response.
Strong analytical, organizational, and leadership skills, with the ability to lead a cyber team and provide on-call support after business hours.
Excellent verbal and written communication skills, including the ability to articulate technical and strategic cyber matters to diverse audiences.
Preferred candidates hold certifications such as GIAC GCIH, GMON, GCFA, or similar.