Cybersecurity DFIR

About Accenture Saudi Arabia

Accenture is a global professional services company that assists businesses, governments, and organizations in building their digital core, optimizing operations, accelerating revenue growth, and enhancing citizen services. With approximately 791,000 employees serving clients in over 120 countries, Accenture focuses on leveraging technology, cloud, data, and AI, combined with industry experience, to create value for clients. The company offers a broad range of services across Strategy & Consulting, Technology, Operations, Industry X, and Song.

The Role: Cybersecurity DFIR

Accenture Saudi Arabia is seeking a Cybersecurity DFIR professional to join its team in Riyadh. This full-time role involves developing and managing cybersecurity processes, responding to incidents, and administering security technologies to enhance the organization's defensive capabilities.

Key Responsibilities

• Develop and create cybersecurity center processes and procedures.
• Work with Security Information and Event Management (SIEM) systems, including collaborating with SIEM engineers to refine correlation rules.
• Utilize Incident Response (IR) tools and solutions for detection, investigation, and response, providing guidance to team members on security event analysis.
• Produce cyber intelligence reports for various audiences, including information security staff, non-technical business representatives, and senior management.
• Administer Endpoint Detection and Response (EDR) technology, including deploying, upgrading, and maintaining EDR agents across Windows, macOS, and Linux.
• Monitor EDR agent health and troubleshoot reporting issues.
• Develop and manage EDR policies and integrate EDR with SIEM and other security tools.
• Administer Network Detection and Response (NDR) technology, including developing and managing NDR policies.
• Integrate NDR with SIEM and other security tools.
• Create and add custom correlation rules for EDR/NDR.
• Periodically review existing EDR/NDR configurations and propose enhancements.
• Manage support tickets with EDR/NDR support as needed.

Required Qualifications and Skills

• Experience in incident response planning and knowledge of SOC policies, processes, and procedures.
• Proficiency in Security Information and Event Management (SIEM).
• Excellent verbal and written communication skills, with the ability to articulate technical and strategic cyber matters to diverse audiences.
• Strong analytical and organizational skills.
• Demonstrated leadership skills, including the ability to lead a cyber team and provide on-call support outside business hours.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia. The role requires collaboration with various security teams and the ability to provide support outside standard business hours.

About Accenture's Culture

Accenture is committed to diversity and inclusion, ensuring that all employment decisions are made without discrimination. The company values its diverse workforce, which contributes to innovation and competitiveness, enabling better service to clients and communities. Accenture supports continuous learning and career advancement for its employees.