SIEM Admin

About Accenture

Accenture Security

Role Summary

Senior SIEM Consultant

Microsoft Sentinel and Azure Security

SIEM & Security Operations Leadership

• Lead the design, architecture, and deployment of large‑scale Microsoft Sentinel implementations for enterprise clients.
• Manage and support complex hybrid Sentinel environments, including multi‑cloud, on‑premises, multi‑tenant, and multi‑subscription architectures.
• Ensure maximum uptime and operational health of SIEM platforms, including log ingestion, data connectors, and log collectors.
• Drive continuous improvement of SOC operations through optimized detection logic, dashboards, and automation.

Microsoft Azure & Security Engineering

• Provide deep technical expertise across Microsoft Azure, supporting security architecture, integrations, and troubleshooting.
• Lead onboarding of large‑scale log sources, including:
• Windows and Linux endpoints
• Network and security devices
• Third‑party and SaaS applications
• Support cloud and network troubleshooting for log source integration and data flow issues.

Detection Engineering & Threat Use Cases

• Design and manage advanced detection use cases leveraging the MITRE ATT&CK framework, tailored to both standard and client‑specific threat scenarios.
• Optimize detection rules using comprehensive knowledge of the Microsoft Defender XDR suite, including Defender for Endpoint, Identity, Office, Cloud Apps, Servers, and Cloud.
• Develop high‑quality SOC operational dashboards and SIEM reporting to support detection, monitoring, and executive visibility.

Automation & Integration

• Architect and implement SOAR playbooks using Azure Logic Apps to automate triage, investigation, and response workflows.
• Lead Sentinel integrations with enterprise tools such as:
• IT Service Management (ITSM) platforms
• Threat Intelligence Feeds and TIP solutions
• Vulnerability Management tools

Documentation & Stakeholder Engagement

• Produce high‑quality technical documentation, including:

• Low‑Level Designs (LLDs)

• Architecture diagrams
• Integration and operational guides
• Prepare clear reports and presentations for client stakeholders, including security leadership and technical teams.
• Act as a trusted advisor, effectively communicating technical risks, recommendations, and outcomes to non‑technical audiences.

Required Experience & Technical Skills

• 6–8 years of overall cybersecurity experience, with exposure to the Middle East market.
• 4+ years of hands‑on experience with Microsoft Sentinel, supporting large enterprises or leading MSSP engagements.
• Deep expertise in Microsoft Azure security architecture and services.
• Proven experience managing complex and large‑scale SIEM deployments.
• Strong understanding of cloud networking concepts and hybrid security architectures.
• Advanced proficiency in Azure Logic Apps for security automation and SOAR.
• Demonstrated expertise with MITRE ATT&CK‑based detection engineering.
• Strong reporting, dashboarding, and analytical capabilities.

Soft Skills & Professional Competencies

• Strong team player with clear ownership and accountability.
• Proactive in identifying, escalating, and mitigating risks and issues.
• Excellent written and verbal communication skills.
• Ability to translate complex technical concepts into clear, client‑friendly language.
• Strong analytical and problem‑solving mindset with a focus on quality and outcomes.

Accenture

• Work on large‑scale, complex security transformation programs across the region.
• Partner with clients to strengthen cyber resilience and security operations maturity.
• Be part of a high‑performance cyber defense practice with continuous learning and growth opportunities.