About the Role
Accenture Middle East is seeking a Cyber Readiness & Crisis Senior Manager to join its team in Riyadh, Saudi Arabia. As a global professional services company, Accenture offers a wide range of services in strategy, consulting, interactive, technology, and operations, with extensive digital capabilities. The Security practice is a rapidly growing area within the business, with significant expansion plans. The global Cyber Investigation and Forensic Response (CIFR) practice is expanding to deliver incident response services to enterprise customers. This role provides an opportunity to build a career within an innovative culture focused on shared success and diverse thinking.
You will be part of a specialized team within Accenture Security CIFR, responding to major data breaches globally and conducting cyber threat hunting in complex business environments. Utilizing various tools and Digital Forensic and Incident Response (DIFR) techniques, you will work in a fast-paced, collaborative environment with a diverse team dedicated to providing expert incident response services to Accenture customers. This position requires individuals who can engage with C-suite executives and guide senior leadership in developing strategies for robust security and enterprise resilience capabilities. Deep industry expertise is crucial for understanding client needs and advising executives on strategies within the incident response landscape.
Key Responsibilities
- Lead incident response engagements, coordinating on-site and remote investigations.
- Identify and investigate intrusions to determine causes and the extent of breaches.
- Conduct data collection, host and network digital forensics, log analysis, and malware analysis using DIFR techniques, including EDR solutions and threat intelligence.
- Lead threat hunting engagements.
- Perform incident response within various Cloud platforms.
- Identify attacker Tactics, Techniques, and Procedures (TTPs) to develop indicators of compromise.
- Develop and implement dynamic remediation plans in conjunction with incident response engagements.
- Author comprehensive client reports detailing investigative findings.
- Communicate effectively with customers, stakeholders, and legal counsel on technical and strategic matters throughout the engagement lifecycle.
- Support Accenture leadership in scoping engagements with methodical approaches based on customer requirements.
- Mentor and train CIFR team members.
- Contribute to the global practice by developing and maintaining service offerings.
Qualifications and Requirements
- Strong knowledge of incident response, digital forensics, and cyber incident investigation processes.
- Familiarity with common DFIR toolsets.
- DFIR-related knowledge of Microsoft Windows, GNU/Linux, and MacOS operating systems.
- Experience with Threat Hunting on both endpoint and network levels.
- Ability to identify attacker TTPs and develop indicators of compromise.
- Understanding of attacker eradication, and improvements to monitoring and protection capabilities.
- Experience developing and implementing dynamic remediation plans for customers.
- Understanding of enterprise environments and their functionality.
- Knowledge of common malware types, behaviors, and infection vectors.
- Ability to lead a team of investigators during demanding engagements, including client interaction.
- Excellent project management and client-facing communication skills.
- Experience with Cloud environments.
- Experience with OT and ICS environments.
- Knowledge of scripting and programming languages.
- Experience with reverse engineering and sandboxing technologies.
- Relevant degree in computing/IT.
- Possession of security certifications such as GREM, GCFE, GCFA, CEH, GCIH, or equivalent.
- Minimum 5 years of DFIR experience.
Required Skills and Expertise
- Incident Response
- Digital Forensics
- Cyber Incident Investigation
- DFIR Toolsets
- Operating Systems: Microsoft Windows, GNU/Linux, MacOS
- Threat Hunting (Endpoint and Network)
- Attacker Tactics, Techniques, and Procedures (TTPs) Identification
- Indicators of Compromise Development
- Remediation Plan Development and Implementation
- Enterprise Environment Understanding
- Malware Analysis and Infection Vector Understanding
- Team Leadership in Investigations
- Client Interaction
- Project Management
- Client-Facing Communication
- Cloud Environments
- Operational Technology (OT) and Industrial Control Systems (ICS) Environments
- Scripting and Programming Languages
- Reverse Engineering and Sandboxing Technologies
- Security Certifications (*, GREM, GCFE, GCFA, CEH, GCIH)
- Data Collection
- Host and Network Digital Forensics
- Log Analysis
- Malware Analysis
- Living-of-the-Land Techniques
- EDR Solutions and Threat Intelligence Application
- Threat Hunting Engagement Leadership
- Incident Response in Cloud Platforms
- Client Report Authoring
- Customer Interface (Technical and Strategic)
- Mentoring and Training Team Members
- Service Offering Development and Maintenance
Work Environment and Location
This is a full-time position based in Riyadh, Saudi Arabia. You will be part of a dynamic team within Accenture's Cyber Investigation and Forensic Response (CIFR) practice, working in a fast-paced, highly collaborative environment with a diverse team.
