Enterprise Logging Solution (Els) Engineer (Mid)
Accenture Federal Services
Leesburg
Who you'll be:
The Enterprise Logging Solution (ELS)/SIEM Engineer supports the Agency's centralized security monitoring and audit/reporting capabilities. This senior-level role involves analyzing, developing, and testing ELS/SIEM enhancements, integrating streaming-ingestion architecture into cloud and on-premise environments, and onboarding new systems. The engineer will also create dashboards for various stakeholders and maintain a Master Project Schedule. Responsibilities include tuning correlation rules, maintaining whitelists/blacklists, and integrating ML/AI capabilities. Candidates must possess a TS/SCI clearance due to elevated-access programs.
What you'll do:
- Analyze, develop, and test proposed ELS/SIEM enhancements using vendor/industry best practices.
- Assess current capabilities against security/logging regulations and perform gap analyses.
- Migrate/implement ELS/SIEM architecture in cloud and on-premise environments.
- Architect and integrate streaming processing solutions for data onboarding/ingestion.
- Develop implementation plans and present change requests at Change Control Board meetings.
- Onboard new systems into ELS/SIEM, including data design requirements and ingestion testing.
- Create dashboards for System Owners, ISSM/ISSO, executive management, and developers.
- Maintain the SIEM's collection of IDS, firewall, proxy, DLP, antivirus, cloud log, and vulnerability scanner data sources.
- Develop correlation rules, signatures, and risk-based scoring enhancements.
- Develop, deploy, and integrate ML and AI into the Agency's ELS/SIEM.
- Provide user support for ELS/SIEM dashboard use and respond to system outages/data-feed issues.
What you need:
- Minimum 5 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, 3 years of such experience.
- TS/SCI clearance is mandatory.
Nice to have:
- Splunk Certified Admin
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
Similar jobs
Security Modernization (Secmod) Specialist
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life be...
Enterprise Logging Solution (Els) Engineer
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life be...
Attack Sensing & Warning Lead
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life be...
Soc Analyst I
Clearance: SecretLocation: Leesburg, VA OnsiteShift: Night Team B- Alternating Wednesday's, Thursday, Friday and Saturday 7PM-7AM Foxhole...
Cyber Enterprise Asset Manager
At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life be...
Delivery Consultant - Data & Analytics, Professional Services
The Amazon Web Services Professional Services (ProServe) team is seeking a skilled Delivery Consultant to join our team at Amazon Web Ser...