SOC Analyst L📣 إعلان

About Accenture Saudi Arabia and the SOC Analyst L1 Role

Accenture is a leading global professional services company, dedicated to helping the world's leading enterprises reinvent by building their digital core, leveraging AI, and creating value at speed and scale. We combine deep industry expertise with cutting-edge technology and bold thinking to deliver impactful outcomes. As a Full-time SOC Analyst L1 based in Riyadh, you will be on the front line of 24x7 Security Operations Center (SOC) operations, protecting enterprise clients against active threats. This role is focused on triaging, investigating, and responding to real incidents within a high-performing global delivery team where speed, accuracy, and judgment are paramount.

Core Responsibilities

• Monitor and analyze security alerts from SIEM, SOAR, EDR, and other security tools to identify potential threats across client environments.
• Perform timely triage, validation, and investigation of alerts in line with SLA requirements and prioritization frameworks (P1–P4).
• Execute containment, response, and remediation actions using established SOC runbooks.
• Manage incidents through the full case lifecycle, including accurate documentation, status updates, and closure in the case management system.
• Monitor SOC communication channels and ensure timely response to inquiries, escalations, and stakeholder coordination.
• Escalate high-severity and complex incidents in line with SLAs, including immediate notification for potential P1/P2 cases.
• Conduct effective shift handovers, ensuring active and critical cases are transferred with full context.
• Identify and report operational gaps, anomalies, or delays within the same shift to relevant leads.
• Contribute to continuous improvement by surfacing gaps in detection, logging, automation, and case handling processes.

Required Qualifications and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
• Strong understanding of cybersecurity fundamentals, including threat types, attack vectors, the CIA triad, and incident response principles.
• Working knowledge of operating systems such as Windows and Linux/Unix.
• Familiarity with networking concepts including TCP/IP, the OSI model, DNS, and HTTP/S.

Essential Technical Skills

• Hands-on experience or familiarity with SIEM/SOAR platforms, endpoint protection, firewalls, and security monitoring tools.
• Ability to analyze logs, network traffic, and endpoint telemetry to identify malicious activity.

Preferred Qualifications

• Familiarity with the MITRE ATT&CK framework for threat identification and mapping.
• Exposure to cloud security concepts across Azure, AWS, or GCP.
• Relevant certifications such as CompTIA Security+, BTL1, or CEH.

Professional Attributes

• Disciplined and process-oriented, with the ability to work effectively in a shift-based, SLA-driven environment.
• Clear communicator with strong documentation habits.
• Ability to coordinate effectively across internal and external stakeholders.