SEIM Admin

Role Summary

We are looking for a Senior SIEM Consultant with deep expertise in Microsoft Sentinel and Azure Security, to lead the design, implementation, and optimization of large‑scale SIEM solutions for enterprise clients across the Middle East.

The ideal candidate brings 6–8 years of overall cybersecurity experience, strong client‑facing exposure, and hands‑on leadership in managing complex, hybrid Sentinel environments within large organizations or Managed Security Service Providers (MSSPs).

This role requires both strong technical depth and the ability to engage effectively with client stakeholders, translating complex security concepts into actionable outcomes.

Key Responsibilities

SIEM & Security Operations Leadership

• Lead the design, architecture, and deployment of large‑scale Microsoft Sentinel implementations for enterprise clients.

• Manage and support complex hybrid Sentinel environments, including multi‑cloud, on‑premises, multi‑tenant, and multi‑subscription architectures.

• Ensure maximum uptime and operational health of SIEM platforms, including log ingestion, data connectors, and log collectors.

• Drive continuous improvement of SOC operations through optimized detection logic, dashboards, and automation.

Microsoft Azure & Security Engineering

• Provide deep technical expertise across Microsoft Azure, supporting security architecture, integrations, and troubleshooting.

• Lead onboarding of large‑scale log sources, including:

  • Windows and Linux endpoints

  • Network and security devices

  • Third‑party and SaaS applications

• Support cloud and network troubleshooting for log source integration and data flow issues.

Detection Engineering & Threat Use Cases

• Design and manage advanced detection use cases leveraging the MITRE ATT&CK framework, tailored to both standard and client‑specific threat scenarios.

• Optimize detection rules using comprehensive knowledge of the Microsoft Defender XDR suite, including Defender for Endpoint, Identity, Office, Cloud Apps, Servers, and Cloud.

• Develop high‑quality SOC operational dashboards and SIEM reporting to support detection, monitoring, and executive visibility.

Automation & Integration

• Architect and implement SOAR playbooks using Azure Logic Apps to automate triage, investigation, and response workflows.

• Lead Sentinel integrations with enterprise tools such as:

  • IT Service Management (ITSM) platforms

  • Threat Intelligence Feeds and TIP solutions

  • Vulnerability Management tools

Documentation & Stakeholder Engagement

• Produce high‑quality technical documentation, including:

  • High‑Level Designs (HLDs)

  • Low‑Level Designs (LLDs)

  • Architecture diagrams

  • Integration and operational guides

• Prepare clear reports and presentations for client stakeholders, including security leadership and technical teams.

• Act as a trusted advisor, effectively communicating technical risks, recommendations, and outcomes to non‑technical audiences.

Required Experience & Technical Skills

• 6–8 years of overall cybersecurity experience, with exposure to the Middle East market.
• 4+ years of hands‑on experience with Microsoft Sentinel, supporting large enterprises or leading MSSP engagements.
• Deep expertise in Microsoft Azure security architecture and services.
• Proven experience managing complex and large‑scale SIEM deployments.
• Strong understanding of cloud networking concepts and hybrid security architectures.
• Advanced proficiency in Azure Logic Apps for security automation and SOAR.
• Demonstrated expertise with MITRE ATT&CK‑based detection engineering.
• Strong reporting, dashboarding, and analytical capabilities.

Soft Skills & Professional Competencies

• Strong team player with clear ownership and accountability.
• Proactive in identifying, escalating, and mitigating risks and issues.
• Excellent written and verbal communication skills.
• Ability to translate complex technical concepts into clear, client‑friendly language.
• Strong analytical and problem‑solving mindset with a focus on quality and outcomes.

Why Join Accenture

• Work on large‑scale, complex security transformation programs across the region.
• Partner with clients to strengthen cyber resilience and security operations maturity.
• Be part of a high‑performance cyber defense practice with continuous learning and growth opportunities.