SIEM Admin

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 784,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com.

Accenture Security

Join Accenture Security to pioneer security solutions that blend risk strategy, digital identity, cyber defense, application security and managed services. Using the coolest next-gen tech, you’ll have every chance to stay one step ahead of cybercrime and out-hack the hackers.

Accenture Security provides comprehensive security services – from security strategy development to business transformation, to managed security services – on demand and at a global scale to help mitigate risks and take full advantage of advanced technologies and proven risk management models. Our experienced team of global security professionals helps businesses understand their risks and build resilience from the inside out, giving them the confidence to focus on what matters most: innovation and business growth.

Role Summary

We are looking for a Senior SIEM Consultant with deep expertise in Microsoft Sentinel and Azure Security, to lead the design, implementation, and optimization of large‑scale SIEM solutions for enterprise clients across the Middle East.

The ideal candidate brings 6–8 years of overall cybersecurity experience, strong client‑facing exposure, and hands‑on leadership in managing complex, hybrid Sentinel environments within large organizations or Managed Security Service Providers (MSSPs).

This role requires both strong technical depth and the ability to engage effectively with client stakeholders, translating complex security concepts into actionable outcomes.

Key ResponsibilitiesSIEM & Security Operations Leadership

• Lead the design, architecture, and deployment of large‑scale Microsoft Sentinel implementations for enterprise clients.

  
  
  

• Manage and support complex hybrid Sentinel environments, including multi‑cloud, on‑premises, multi‑tenant, and multi‑subscription architectures.

  
  
  

• Ensure maximum uptime and operational health of SIEM platforms, including log ingestion, data connectors, and log collectors.

  
  
  

• Drive continuous improvement of SOC operations through optimized detection logic, dashboards, and automation.

  
  
  

Microsoft Azure & Security Engineering

• Provide deep technical expertise across Microsoft Azure, supporting security architecture, integrations, and troubleshooting.

  
  
  

• Lead onboarding of large‑scale log sources, including:

  
  
  

  • Windows and Linux endpoints

    
    
    

  • Network and security devices

    
    
    

  • Third‑party and SaaS applications

    
    
    

• Support cloud and network troubleshooting for log source integration and data flow issues.

  
  
  

Detection Engineering & Threat Use Cases

• Design and manage advanced detection use cases leveraging the MITRE ATT&CK framework, tailored to both standard and client‑specific threat scenarios.

  
  
  

• Optimize detection rules using comprehensive knowledge of the Microsoft Defender XDR suite, including Defender for Endpoint, Identity, Office, Cloud Apps, Servers, and Cloud.

  
  
  

• Develop high‑quality SOC operational dashboards and SIEM reporting to support detection, monitoring, and executive visibility.

  
  
  

Automation & Integration

• Architect and implement SOAR playbooks using Azure Logic Apps to automate triage, investigation, and response workflows.

  
  
  

• Lead Sentinel integrations with enterprise tools such as:

  
  
  

  • IT Service Management (ITSM) platforms

    
    
    

  • Threat Intelligence Feeds and TIP solutions

    
    
    

  • Vulnerability Management tools

    
    
    

Documentation & Stakeholder Engagement

• Produce high‑quality technical documentation, including:

  
  
  

  • High‑Level Designs (HLDs)

    
    
    

  • Low‑Level Designs (LLDs)

    
    
    

  • Architecture diagrams

    
    
    

  • Integration and operational guides

    
    
    

• Prepare clear reports and presentations for client stakeholders, including security leadership and technical teams.

  
  
  

• Act as a trusted advisor, effectively communicating technical risks, recommendations, and outcomes to non‑technical audiences.