استشاري تقديم خدمات الأمن السيبراني

About Accenture Technology

Accenture is a global professional services company with leading capabilities in digital, cloud, and security. Combining unmatched experience and specialized skills across more than 40 industries, Accenture offers Strategy & Consulting, Technology, Operations, Industry X, and Song services. Our people deliver on the promise of technology and human ingenuity every day, helping organizations accelerate innovation and create measurable value at scale.

Job Summary

We are seeking a Security Operations Lead to oversee cybersecurity operations, threat detection, incident response, and security monitoring activities across enterprise environments. This role combines hands-on technical expertise with team leadership responsibilities, requiring a professional who can actively participate in security operations while guiding analysts, improving security processes, and supporting organizational cyber resilience initiatives.

The successful candidate will play a key role in strengthening security monitoring capabilities, enhancing operational processes, and ensuring effective response to cybersecurity threats and incidents.

Additional Key Responsibilities

• Develop, implement, and continuously improve cybersecurity operations processes, procedures, policies, incident response plans, security monitoring workflows, and operational runbooks.

• Partner with SIEM engineers and security teams to develop, optimize, and refine correlation rules to improve threat detection accuracy and reduce false positives.

• Monitor, investigate, and analyze security events, providing technical guidance during ongoing investigations and security incidents.

• Lead incident detection, triage, investigation, containment, eradication, and recovery activities.

• Administer and manage Endpoint Detection and Response (EDR) platforms across Windows, macOS, and Linux environments, including deployment, upgrades, health monitoring, policy management, and integrations.

• Administer and manage Network Detection and Response (NDR) technologies, including policy creation, correlation rule development, platform tuning, and ongoing optimization.

• Manage vendor support engagements related to cybersecurity tools and coordinate issue resolution activities.

• Utilize incident response tools and technologies throughout the detection, investigation, and response lifecycle.

• Produce cyber threat intelligence reports and security assessments for technical teams, business stakeholders, and leadership audiences.

• Lead day-to-day cybersecurity operations activities and provide guidance, coaching, and mentorship to security analysts.

• Support on-call and major incident response activities when required.

• Track security incidents, trends, and operational metrics to identify improvement opportunities.

• Collaborate with engineering, infrastructure, risk, and compliance teams to strengthen overall security posture.

• Drive continuous improvement initiatives to enhance cybersecurity operations maturity and effectiveness.

Experience

• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related field.

• 4 to 8 years of experience in Cybersecurity, Security Operations, Security Monitoring, Incident Response, or SOC environments.

• Experience working with SIEM, EDR, NDR, and threat detection technologies.

• Proven experience investigating security incidents and coordinating response activities.

• Experience leading security analysts, coordinating workstreams, or mentoring junior team members.

• Experience supporting enterprise cybersecurity operations in medium to large-scale environments.

Technical Expertise

• Strong knowledge of Security Operations Center (SOC) processes and cybersecurity operations.

• Hands-on experience with SIEM platforms and security monitoring tools.

• Strong experience with Endpoint Detection and Response (EDR) solutions.

• Experience with Network Detection and Response (NDR) technologies and network security monitoring.

• Knowledge of incident response methodologies and cyber threat investigation techniques.

• Familiarity with threat intelligence processes and threat hunting methodologies.

• Strong understanding of security event analysis, attack techniques, and detection engineering concepts.

• Experience creating and tuning detection rules and alerting mechanisms.

• Knowledge of security frameworks and industry best practices.

• Strong analytical and problem-solving skills.

• Excellent written and verbal communication skills.

Preferred Certifications

• CompTIA Security+

• GIAC Certified Incident Handler (GCIH)

• GIAC Certified Intrusion Analyst (GCIA)

• Certified SOC Analyst (CSA)

• CISSP (Certified Information Systems Security Professional)

• CISM (Certified Information Security Manager)

• Microsoft Security Certifications

• Splunk, Microsoft Sentinel, QRadar, or equivalent SIEM certifications

Why Join Us?

• Work alongside leading cybersecurity professionals in a dynamic security operations environment.

• Gain exposure to advanced detection, monitoring, and incident response technologies.

• Access continuous learning and certification opportunities.

• Collaborate on complex cybersecurity challenges and enterprise-scale security programs.

• Contribute to strengthening cyber resilience and protecting critical business operations.

• Benefit from a culture focused on innovation, growth, and professional development.