Security Delivery Senior Analyst

About the Role

Accenture Middle East is seeking a Security Delivery Senior Analyst to join their team in Riyadh, Saudi Arabia. This full-time role involves taking ownership of security events, performing detailed investigations, and contributing to the continuous improvement of security operations. The position requires 5-10 years of relevant experience.

Key Responsibilities

The Security Delivery Senior Analyst will play a central role within Security Operations, focusing on incident handling and detection support.

Incident Triage and Investigation

• Take ownership of security incidents and events escalated from L1 analysts, managing them according to defined SOC processes and procedures.
• Perform detailed triage, validation, and investigation of detected and escalated security events.
• Analyze and categorize events of interest based on agreed severity levels, escalation criteria, and runbooks.
• Correlate available security information to determine the nature, scope, and potential impact of suspicious activity.
• Escalate complex or high-risk incidents through appropriate response channels when necessary.
• Maintain accurate investigation findings, evidence, and incident documentation.

SIEM and Detection Support

• Collaborate with SIEM administrators and security engineering teams to support the creation and enhancement of security-monitoring use cases.
• Provide investigation insights to identify opportunities for improving existing detection logic.
• Support the testing and refinement of SIEM use cases based on operational security requirements.
• Identify potential detection gaps observed during incident investigations and raise them with relevant security teams.

SOC Procedures and Continuous Improvement

• Develop, maintain, and continuously improve Standard Operating Procedures (SOPs), investigation playbooks, and Incident Response plans.
• Help standardize investigation and triage practices to promote consistent incident handling across the SOC.
• Capture lessons learned from investigations and contribute to improvements in operational processes.
• Collaborate with L1 analysts and other security teams to support effective incident handling and knowledge sharing.

Experience Required

Candidates should possess 5-10 years of experience in a relevant security operations or incident response role.