- Location
- Leesburg, VA · Leesburg, Virginia, United States
- Workplace
- Onsite
- Department
- 60024445 - AFS Cyber Mission
- Seniority
- Mid
- Experience
- 5+ years
- Education
- Bachelor
- Clearance
- Required
- Source
- Greenhouse
Description
Who you'll be:
The Enterprise Logging Solution (ELS)/SIEM Engineer supports the Agency's centralized security monitoring and audit/reporting capabilities. This senior-level role involves analyzing, developing, and testing ELS/SIEM enhancements, integrating streaming-ingestion architecture into cloud and on-premise environments, and onboarding new systems. The engineer will also create dashboards for various stakeholders and maintain a Master Project Schedule. Responsibilities include tuning correlation rules, maintaining whitelists/blacklists, and integrating ML/AI capabilities. Candidates must possess a TS/SCI clearance due to elevated-access programs.
What you'll do:
- Analyze, develop, and test proposed ELS/SIEM enhancements using vendor/industry best practices.
- Assess current capabilities against security/logging regulations and perform gap analyses.
- Migrate/implement ELS/SIEM architecture in cloud and on-premise environments.
- Architect and integrate streaming processing solutions for data onboarding/ingestion.
- Develop implementation plans and present change requests at Change Control Board meetings.
- Onboard new systems into ELS/SIEM, including data design requirements and ingestion testing.
- Create dashboards for System Owners, ISSM/ISSO, executive management, and developers.
- Maintain the SIEM's collection of IDS, firewall, proxy, DLP, antivirus, cloud log, and vulnerability scanner data sources.
- Develop correlation rules, signatures, and risk-based scoring enhancements.
- Develop, deploy, and integrate ML and AI into the Agency's ELS/SIEM.
- Provide user support for ELS/SIEM dashboard use and respond to system outages/data-feed issues.
What you need:
- Minimum 5 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, 3 years of such experience.
- TS/SCI clearance is mandatory.
Nice to have:
- Splunk Certified Admin
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.