Summary
Accenture is hiring a Cybersecurity Service Delivery Manager to lead SIEM logging and security-monitoring enablement. The role covers log-source assessment, onboarding, ingestion, parsing, normalization and validation, as well as delivery planning, risk tracking and stakeholder reporting. The manager will coordinate with cybersecurity, application, infrastructure and platform teams and troubleshoot log quality and ingestion issues. The posting names both Riyadh and Jeddah as locations.
The posting
As published on accenture.com. Pulled from the employer's site and shown as they wrote it.
Location: Jeddah
Join Accenture Security and play a key role in strengthening our clients’ cyber defense capabilities.
As a Cybersecurity Service Delivery Manager, you will lead the delivery of SIEM logging and security monitoring enablement across complex enterprise environments. You will combine strong technical knowledge of SIEM and log management with delivery leadership, ensuring security-relevant data is onboarded, normalized and validated to effectively support threat detection and monitoring use cases.
You will work closely with security, application, infrastructure and engineering teams to translate detection and monitoring requirements into actionable logging requirements, drive structured onboarding waves, resolve data-quality challenges and provide stakeholders with clear visibility of delivery progress, risks and outcomes.
SIEM & Logging Delivery
- Lead end-to-end delivery of log-source assessment, onboarding and validation into enterprise SIEM platforms, with Splunk preferred.
- Define and govern logging requirements aligned with security monitoring, detection and investigation use cases.
- Oversee log onboarding activities including source identification, ingestion, parsing, field extraction, normalization and validation.
- Assess log sources for quality, completeness, consistency and security value, identifying gaps and recommending remediation.
- Ensure required security events and fields are captured accurately and made available to monitoring and detection teams.
Technical & Delivery Leadership
- Provide technical direction and troubleshooting support for complex log ingestion, parsing, mapping and data-quality issues.
- Apply strong knowledge of common logging formats and protocols, including syslog, JSON, Windows Event Logs and application logs.
- Drive consistent approaches to data normalization and standardization across diverse technology environments.
- Understand how telemetry supports detection engineering and collaborate with detection teams to ensure logs meet defined use-case requirements.
- Coordinate dependencies across application, infrastructure, platform and cybersecurity teams to enable required logging.
- Lead delivery through batch-based, wave-based or phased onboarding approaches, balancing delivery priorities, dependencies and technical readiness.
Service Management & Governance
- Own delivery planning, progress tracking, risks, issues, dependencies and stakeholder reporting for assigned logging initiatives.
- Establish clear quality criteria and ensure onboarding outputs meet agreed technical and operational requirements.
- Produce high-quality assessments, onboarding documentation, status reporting and management-level updates.
- Facilitate working sessions with technical teams and stakeholders to resolve blockers and maintain delivery momentum.
- Identify opportunities to improve onboarding processes, logging standards, operational efficiency and monitoring coverage.
- Act as a trusted point of coordination between cybersecurity teams and technology stakeholders.
What You’ll Need
- Strong hands-on understanding of SIEM technologies, preferably Splunk.
- Demonstrated experience with log onboarding, ingestion pipelines, parsing and field extraction.
- Strong understanding of security logging across operating systems, applications, network devices and security technologies.
- Knowledge of common log formats and protocols such as syslog, JSON and Windows events.
- Experience assessing and improving log quality, completeness and consistency.
- Experience defining logging requirements against security monitoring and detection use cases.
- Working knowledge of detection engineering and the role telemetry plays in effective security detections.
- Understanding of security-data normalization, standardization and mapping practices.
- Strong analytical and troubleshooting capabilities, particularly for ingestion and data-quality issues.
- Experience coordinating with application, infrastructure, platform and security teams.
- Demonstrated experience managing structured, phased or batch-based technology delivery.
- Strong documentation, reporting and presentation capabilities.
- Excellent stakeholder management and communication skills, with the ability to translate technical issues into clear business and delivery impacts.
Bonus Points If You Have
- Experience delivering SIEM or security-monitoring capabilities in large-scale enterprise environments.
- Experience with Splunk administration, SPL, data models or Common Information Model concepts.
- Exposure to SOC operations, threat detection, incident investigation or threat hunting.
- Experience working with cloud and hybrid environments.
- Familiarity with MITRE ATT&CK and security monitoring frameworks.
- Relevant cybersecurity, SIEM, Splunk or service-management certifications.
- Experience operating within a Managed Security Services environment.