{bc}
linkedin

SOC Engineer L3 (DFIR)

Accenture Middle East
Riyadh, KSA
Full-time
Mid-Senior
Onsite
Discovered 2 weeks ago
Incident responseDigital forensicsSIEM engineering and tuningSplunk, Microsoft Sentinel, or QRadarNetwork protocolsAttack techniques and threat actor TTPs

Full Job Posting

Role overview

The SOC L3 (DFIR) Engineer is a senior escalation point within the Security Operations Center.

Leads complex incident response and digital forensics and drives SIEM engineering and tuning to strengthen client detection capabilities.

Mentors junior SOC analysts.

Responsibilities

  • Escalate and lead response to complex, high-severity incidents from L1 and L2 analysts, including containment, eradication, and recovery.
  • Conduct digital forensics on endpoints, networks, and logs to establish root cause and impact.
  • Engineer and tune SIEM use cases, correlation rules, and alerting to improve accuracy and reduce false positives.
  • Develop incident-response playbooks and SOC procedures; integrate threat intelligence with the CTI team.
  • Mentor L1/L2 analysts and prepare incident reports for management and clients.

Qualifications

  • 2–5 years of SOC experience, including hands-on L3 DFIR experience.
  • Strong expertise in incident response and digital forensics methodologies.
  • Hands-on SIEM platform experience, including rule creation and tuning.
  • Understanding of network protocols, attack techniques, threat actor TTPs, and MITRE ATT&CK applied to detection engineering.
  • Strong analytical, problem-solving, and communication skills.

Preferred qualifications

  • GCIH, GCFE, GCFA, Splunk Certified, Microsoft SC-200, or equivalent certifications are a plus.
  • Knowledge of Saudi Arabia's NCA cybersecurity regulations and compliance requirements is preferred.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Accenture Middle East