Security Delivery Consultant

About the Role

Accenture Saudi Arabia is seeking a Security Delivery Consultant to join their team in Riyadh. This full-time role focuses on strengthening organizations' capabilities to detect, investigate, and respond to cyber threats. The consultant will deliver and enhance Security Operations Center (SOC) functions across Incident Response, SIEM, Endpoint Detection and Response (EDR), and Network Detection and Response (NDR).

Key Responsibilities

• Develop, maintain, and improve Incident Response plans, SOC policies, processes, procedures, and operational playbooks.
• Lead and support the detection, investigation, containment, and response to cybersecurity events and incidents.
• Perform detailed analysis of security events and provide technical guidance to security teams.
• Support the continuous maturity of Cybersecurity Operations Center processes and procedures.
• Provide technical leadership during complex incidents, investigations, and escalations.
• Collaborate with SIEM engineers to develop, refine, and optimize security correlation rules.
• Analyze security telemetry and events to identify suspicious activity and potential threats.
• Develop and tune custom correlation and detection rules using SIEM, EDR, and NDR telemetry.
• Administer and optimize enterprise EDR and NDR technologies, including deployment, upgrades, and maintenance of agents across Windows, macOS, and Linux.
• Develop, maintain, and optimize EDR and NDR security policies and configurations.
• Integrate EDR and NDR technologies with SIEM and other cybersecurity platforms.
• Produce clear, actionable cyber intelligence and security reports, communicating technical findings, risks, and recommendations.
• Provide technical leadership, coaching, and guidance to cybersecurity team members.
• Participate in on-call and after-hours security support when required.

Qualifications and Experience

• Strong experience in Security Operations and Incident Response.
• Experience developing or maintaining Incident Response plans and SOC policies, procedures, and processes.
• Strong hands-on experience with Security Information and Event Management (SIEM) technologies.
• Experience developing, tuning, or refining security correlation and detection rules.
• Hands-on expertise administering EDR and NDR technologies.
• Experience deploying and maintaining endpoint security agents across Windows, macOS, and Linux.
• Experience integrating EDR/NDR platforms with SIEM and other security technologies.
• Strong knowledge of security-event analysis, investigation, detection, and response.

Required Skills

• Strong analytical, troubleshooting, and organizational capabilities.
• Ability to technically lead teams and provide guidance during complex cybersecurity investigations.
• Excellent verbal and written communication skills, with the ability to engage both technical and non-technical stakeholders.
• Strong documentation and security-reporting capabilities.

Work Environment

This is a full-time position based in Riyadh. The role requires collaboration across SOC, infrastructure, network, application, and broader security teams, and may involve participation in on-call or after-hours support.