OT SOC L2 | Riyadh, SA

Title : OT SOC L2

Location : Riyadh, Saudi Arabia

About Accenture

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Song, Technology and Operations services - all powered by the world's largest network of Advanced Technology and Intelligent Operations centers. Our 791,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at Accenture Security

Join Accenture Security to pioneer security solutions that blend risk strategy, digital identity, cyber defense, application security and managed services. Using the coolest next-gen tech, you'll have every chance to stay one step ahead of cybercrime and out-hack the hackers.

Accenture Security provides comprehensive security services - from security strategy development to business transformation, to managed security services - on demand and at a global scale to help mitigate risks and take full advantage of advanced technologies and proven risk management models. Our experienced team of global security professionals helps businesses understand their risks and build resilience from the inside out, giving them the confidence to focus on what matters most : innovation and business growth.

Responsibilities and Accountabilities

• Able to assess current state capabilities, identify gaps, and plan initiatives to address gaps and accomplish project goals. Building out cybersecurity monitoring & response functions in operational environments.
• Assessing OT security capabilities-specifically security operations and SOC capabilities.
• Develop An integrated communication Plans between OTSOC, ITSCO and business.
• Security Event Monitoring & alerting using Splunk (Level 1) and leverage the OT Cybersecurity Viability Tool (Nozomi) for detailed, analysis, and improvement (Level 2) Cyber Security Incident management.
• Liaise with IT / OT Cyber security teams, site teams.
• Manage support tickets raised by L1. And Security event analysis and recommendations related to OT and Help confirm incident tickets are updated and closed with all actions performed.
• Build and maintain operating procedures & documentation (playbooks & IR plan).
• Re-classify security incidents based on their impact.
• Operational reports and dashboards will be out of the box from OT platform.
• SOP and KB documentation update and maintenance which will be stored and maintained in the customer provided SharePoint site.
• Monitoring and triage of OT security alerts (enrichment, log analysis, false positive suppression) Incident identification & prioritization
• Log qualified incidents into client's ITSM and coordinate with client CSIRT and resolver groups across the full lifecycle.
• Provide remediation recommendations based on reaction plans.
• Incident Management and escalation to Client CSIRT and / or external Incident Response teams according to playbooks
• Categorize, document, measure, and report security incidents.
• Familiar with SIEM Solution and OT Security Products SIEM integration.
• Familiar with OT Asset Inventory and Vulnerability Management solution such as "Nozomi - Dragos, etc" certified is added value.
• Use case development and tuning for OT sec threat detections.
• Familiar with OT SOAR solution integration and content playbooks development / improvement.
• Familiar with OT Forensics Tools and PCAP analysis.
• Familiar with OT Threat Intelligence, Threat Hunting reports for major and well-known OT Cyber Incident. and provide SMART recommendation to organization.
• GRID Certificate or official training is added value and plus to candidate.

Skills and Qualifications :

Preferred Qualifications :

Why join us?

Next Steps

If this sounds like the ideal role, career, and company for you, click below to apply.

To learn more about life @AccentureMiddleEast, follow us on social media and keep up with our latest news.

Accenture Middle East : LinkedIn, Instagram, Facebook, Twitter, YouTube

About Accenture

We work with one shared purpose : to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.At Accenture, we see well-being holistically, supporting our people's physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We're proud to be consistently recognized as one of the World's Best Workplaces.Join Accenture to work at the heart of change.

Visit us at Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.

Boost your career

Find thousands of job opportunities by signing up to eFinancialCareers today.

#J-18808-Ljbffr