Security Delivery Senior Analyst

About the Role

Accenture Saudi Arabia is seeking a Security Delivery Senior Analyst to join their team in Riyadh. This full-time role involves taking ownership of security events escalated from L1 analysts, performing in-depth triage, investigation, and analysis within Security Operations. The Senior Analyst will ensure consistent incident handling according to established processes and contribute to the enhancement of security playbooks, incident response procedures, and SIEM detection use cases.

Key Responsibilities

• Take ownership of security incidents and events escalated from L1 analysts, handling them according to defined SOC processes and procedures.
• Perform detailed triage, validation, and investigation of detected and escalated security events.
• Analyze and categorize events of interest based on agreed severity levels, escalation criteria, and runbooks.
• Correlate available security information to determine the nature, scope, and potential impact of suspicious activity.
• Escalate complex or high-risk incidents through appropriate response channels when required.
• Maintain accurate investigation findings, evidence, and incident documentation.

SIEM and Detection Support

• Collaborate with SIEM administrators and security engineering teams to support the creation and enhancement of security-monitoring use cases.
• Provide investigation insights to identify opportunities for improving existing detection logic.
• Support the testing and refinement of SIEM use cases based on operational security requirements.
• Identify potential detection gaps observed during incident investigations and report them to the relevant security teams.

SOC Procedures and Continuous Improvement

• Develop, maintain, and continuously improve Standard Operating Procedures (SOPs), investigation playbooks, and Incident Response plans.
• Standardize investigation and triage practices to promote consistent incident handling across the SOC.
• Capture lessons learned from investigations and contribute to improvements in operational processes.
• Collaborate with L1 analysts and other security teams to support effective incident handling and knowledge sharing.

Qualifications and Requirements

• Experience working within a Security Operations Center (SOC) or cybersecurity monitoring environment.
• Hands-on experience with security event triage, investigation, and incident escalation.
• Good understanding of Incident Response processes, SOC procedures, and security runbooks.
• Experience using Security Information and Event Management (SIEM) technologies.
• Ability to investigate and correlate security events and identify potentially malicious activity.
• Understanding of security alerts, event severity classification, and escalation processes.
• Experience creating or maintaining SOPs, playbooks, and Incident Response documentation.
• Understanding of SIEM detection use cases and correlation rules.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Strong written and verbal communication skills with attention to detail.

Preferred Qualifications

• Experience supporting SIEM use-case development or detection tuning.
• Exposure to EDR, SOAR, endpoint security, or other security-monitoring technologies.
• Familiarity with MITRE ATT&CK and common attack techniques.
• Experience with threat hunting or deeper incident investigation.
• Relevant cybersecurity or SOC certifications.