SIEM Admin📣 Job Ad

About the Role

Accenture Middle East is seeking a Senior SIEM Consultant to join its team in Riyadh, Saudi Arabia. This role is part of Accenture Security, which focuses on developing innovative security solutions that integrate risk strategy, digital identity, cyber defense, application security, and managed services. Accenture is a global professional services company with approximately 784,000 professionals serving clients in over 120 countries, leveraging strengths in technology, cloud, data, and AI to drive value.

Role Overview

The Senior SIEM Consultant will lead the design, implementation, and optimization of large-scale SIEM solutions, specifically focusing on Microsoft Sentinel and Azure Security for enterprise clients across the Middle East. This position requires strong client-facing experience and hands-on leadership in managing complex, hybrid Sentinel environments within large organizations or Managed Security Service Providers (MSSPs). The role involves translating complex security concepts into actionable outcomes for client stakeholders.

Key Responsibilities

• Lead the design, architecture, and deployment of large-scale Microsoft Sentinel implementations for enterprise clients.
• Manage and support complex hybrid Sentinel environments, including multi-cloud, on-premises, multi-tenant, and multi-subscription architectures.
• Ensure maximum uptime and operational health of SIEM platforms, including effective log ingestion, data connector management, and log collector functionality.
• Drive continuous improvement of Security Operations Center (SOC) operations through the optimization of detection logic, dashboards, and automation workflows.
• Provide deep technical expertise across Microsoft Azure, supporting security architecture, integrations, and troubleshooting.
• Lead the onboarding of large-scale log sources, including Windows and Linux endpoints, network and security devices, and third-party and SaaS applications.
• Support cloud and network troubleshooting to resolve log source integration and data flow issues.
• Design and manage advanced detection use cases leveraging the MITRE ATT&CK framework for standard and client-specific threat scenarios.
• Optimize detection rules using comprehensive knowledge of the Microsoft Defender XDR suite.
• Develop high-quality SOC operational dashboards and SIEM reporting for detection, monitoring, and executive visibility.
• Architect and implement SOAR playbooks using Azure Logic Apps to automate triage, investigation, and response workflows.
• Lead Sentinel integrations with enterprise tools such as IT Service Management (ITSM) platforms, Threat Intelligence Feeds, Threat Intelligence Platforms (TIP), and Vulnerability Management tools.
• Produce high-quality technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), architecture diagrams, and integration and operational guides.
• Prepare clear reports and presentations for client stakeholders, including security leadership and technical teams.
• Act as a trusted advisor, communicating technical risks, recommendations, and outcomes to non-technical audiences.

Qualifications and Requirements

• A minimum of 6-8 years of overall cybersecurity experience, with demonstrated exposure to the Middle East market.
• At least 4 years of hands-on experience with Microsoft Sentinel, supporting large enterprises or leading MSSP engagements.
• Deep expertise in Microsoft Azure security architecture and services.
• Proven experience managing complex and large-scale SIEM deployments.
• Strong understanding of cloud networking concepts and hybrid security architectures.
• Advanced proficiency in Azure Logic Apps for security automation and SOAR.
• Demonstrated expertise with MITRE ATT&CK-based detection engineering.
• Strong reporting, dashboarding, and analytical capabilities.
• A strong team player with clear ownership and accountability.
• Proactive in identifying, escalating, and mitigating risks and issues.
• Excellent written and verbal communication skills.
• Ability to translate complex technical concepts into clear, client-friendly language.
• A strong analytical and problem-solving mindset with a focus on quality and outcomes.

Required Skills

• Microsoft Sentinel
• Azure Security
• Cybersecurity
• Client-facing engagement
• SIEM
• Microsoft Azure
• Security Architecture
• Integrations
• Troubleshooting
• Log Ingestion
• Data Connectors
• Log Collectors
• Detection Logic
• Dashboards
• Automation
• Windows Endpoints
• Linux Endpoints
• Network Devices
• Security Devices
• SaaS Applications
• Cloud Networking
• MITRE ATT&CK
• Microsoft Defender XDR (including Defender for Endpoint, Identity, Office 365, Cloud Apps, Servers, and Cloud)
• SOC Operational Dashboards
• SIEM Reporting
• SOAR Playbooks
• Azure Logic Apps
• IT Service Management (ITSM)
• Threat Intelligence Feeds
• Threat Intelligence Platforms (TIP)
• Vulnerability Management
• High-Level Designs (HLDs)
• Low-Level Designs (LLDs)
• Architecture Diagrams
• Integration Guides
• Operational Guides
• Reporting
• Analysis
• Problem-solving
• Teamwork
• Ownership
• Accountability
• Risk Mitigation
• Communication

Work Location and Type

This is a full-time position based in Riyadh, Saudi Arabia.