SIEM Admin

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent‑ and innovation‑led company with approximately 784,000 people serving clients in more than 120 countries. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song enable us to help our clients reinvent and build trusted, lasting relationships.

Join Accenture Security to pioneer security solutions that blend risk strategy, digital identity, cyber defense, application security and managed services. Using the coolest next‑gen tech, you’ll have every chance to stay one step ahead of cybercrime and out‑hack the hackers.

Accenture Security provides comprehensive security services – from security strategy development to business transformation, to managed security services – on demand and at a global scale to help mitigate risks and take full advantage of advanced technologies and proven risk‑management models. Our experienced team of global security professionals helps businesses understand their risks and build resilience from the inside out, giving them the confidence to focus on what matters most: innovation and business growth.

We are looking for a Senior SIEM Consultant with deep expertise in Microsoft Sentinel and Azure Security to lead the design, implementation and optimisation of large‑scale SIEM solutions for enterprise clients across the Middle East. The ideal candidate brings 6–8 years of overall cybersecurity experience
, strong client‑facing exposure
, and hands‑on leadership in managing complex, hybrid Sentinel environments within large organisations or Managed Security Service Providers (MSSPs). This role requires both strong technical depth and the ability to engage effectively with client stakeholders, translating complex security concepts into actionable outcomes.

• Lead the design, architecture, and deployment of large‑scale Microsoft Sentinel implementations for enterprise clients.
• Manage and support complex hybrid Sentinel environments, including multi‑cloud, on‑premises, multi‑tenant, and multi‑subscription architectures.
• Ensure maximum uptime and operational health of SIEM platforms, including log ingestion, data connectors and log collectors.
• Drive continuous improvement of SOC operations through optimised detection logic, dashboards and automation.

• Provide deep technical expertise across Microsoft Azure, supporting security architecture, integrations and troubleshooting.
• Lead onboarding of large‑scale log sources, including:
  • Windows and Linux endpoints
  • Network and security devices
  • Third‑party and SaaS applications
• Support cloud and network troubleshooting for log source integration and data flow issues.

• Design and manage advanced detection use cases leveraging the MITRE ATT&CK framework, tailored to both standard and client‑specific threat scenarios.
• Optimize detection rules using comprehensive knowledge of the Microsoft Defender XDR suite, including Defender for Endpoint, Identity, Office, Cloud Apps, Servers and Cloud.
• Develop high‑quality SOC operational dashboards and SIEM reporting to support detection, monitoring and executive visibility.

• Architect and implement SOAR playbooks using Azure Logic Apps to automate triage, investigation and response workflows.
• Lead Sentinel integrations with enterprise tools such as:
  • IT Service Management (ITSM) platforms
  • Threat Intelligence Feeds and TIP solutions
  • Vulnerability Management tools

• Produce high‑quality technical documentation, including:
  • High‑Level Designs (HLDs)
  • Low‑Level Designs (LLDs)
  • Architecture diagrams
  • Integration and operational guides
• Prepare clear reports and presentations for client stakeholders, including security leadership and technical teams.
• Act as a trusted advisor, effectively communicating technical risks, recommendations and outcomes to non‑technical audiences.