Accenture Federal Services is seeking a Cyber Analyst to join our team and support our client at Hill AFB in Utah. This role focuses on continuous security monitoring, threat detection, incident response, and threat hunting across mission-critical, multi-classification environments.

You will work within the Cyber Defense Branch alongside other Cyber Analysts, monitoring SIEM telemetry, triaging alerts, and investigating suspicious activity, while coordinating closely with the Security Engineering and ISSO Branches on remediation and reporting.

The ideal candidate brings hands-on security monitoring or SOC/NOC experience and is comfortable operating in a fast-paced, mission-focused environment with shift-based coverage expectations.

What you’ll do:

Monitoring & Threat Detection

• Monitor SIEM platforms (Splunk preferred) for security events and anomalous activity across mission systems
• Triage and investigate security alerts, escalating confirmed incidents per established procedures
• Perform proactive threat hunting to identify indicators of compromise not caught by automated detection

Incident Response

• Participate in incident handling and response activities, documenting findings and recovery actions
• Support root-cause investigation for confirmed security incidents
• Coordinate with the ISSO Branch and ISSM on incident reporting and tracking recovery actions to closure

Vulnerability & Compliance Support

• Support vulnerability scanning and assessment activities using tools such as Nessus/ACAS
• Assist with STIG compliance verification using SCAP Compliance Checker or Evaluate-STIG
• Contribute findings to POA&M tracking and remediation coordination

Collaboration & Continuous Improvement

• Operate within an Agile framework — participate in sprints, standups, and retrospectives
• Document detection logic, playbooks, and investigation procedures for team-wide use
• Partner with Security Engineers on detection tuning and telemetry improvements

What you’ll need:

• 2 years of experience in a security monitoring, SOC/NOC, or cyber defense analyst role
• Hands-on experience with SIEM platforms (Splunk preferred) for monitoring and investigation
• TCP/IP networking and network security fundamentals
• Experience with threat hunting methodologies and frameworks (e.g., MITRE ATT&CK)
• Familiarity with incident response processes and documentation standards
• CompTIA Security+ (current) or equivalent security certification

Bonus Points if you have:

• DoD 8570 CSSP Analyst certification (or equivalent), such as GCIA or CySA+
• Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, or related field (relevant certifications considered in lieu of degree)
• Familiarity with STIG compliance tools (e.g.: SCAP Compliance Checker, Evaluate-STIG)
• Working knowledge of vulnerability management tools (e.g.: Nessus/ACAS)
• Familiarity with container security (Docker/Kubernetes/ECS/EKS/AKS)
• Experience with cloud security monitoring in AWS or Azure environments
• Demonstrated ability to work effectively in agile, fast-paced environments

Work Environment & Culture Fit

• Comfortable in a fast-paced, mission-focused monitoring environment
• Strong attention to detail — able to distinguish genuine threats from noise under alert volume
• Solution ownership mindset — takes findings through to resolution rather than handing off incomplete investigations
• Fail-fast, fail-forward mindset — comfortable learning from missed detections and improving tuning quickly
• Willingness to support shift-based or on-call coverage as required for continuous monitoring

Security Clearance

• Active TOP SECRET clearance required to apply (SCI eligibility preferred)