<div class="content-intro"><div> <div> </div> <div>At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. </div> <div> </div> <div>Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. </div> <div> </div> <div>Join us to drive positive, lasting change that moves missions and the government forward!</div> <div> </div> </div></div><p>Supports the Enterprise Logging Solution (ELS)/SIEM environment that provides centralized security monitoring and audit/reporting capabilities to the Agency's System Owners, ISSMs/ISSOs, and the SOC, spanning architecture, implementation, and ongoing operations & maintenance, both on-premise and in the cloud. As an engineer on this task, the role analyzes, develops, and tests proposed ELS/SIEM enhancements, migrates and integrates streaming-ingestion architecture into cloud and on-premise environments, and onboards newly added systems into the ELS/SIEM through a defined data-design, collection, and ingestion-testing process. It builds dashboards for System Owners, ISSM/ISSO, executive management, and developers, and maintains a Master Project Schedule reviewed bi-weekly with Government leadership. Day-to-day O&M responsibilities include tuning correlation rules and signatures, maintaining whitelists/blacklists, and integrating ML/AI capabilities into the Agency's SIEM.</p> <p> </p> <p><strong>The Work:</strong></p> <ul> <li>Analyze, develop, and test proposed ELS/SIEM enhancements using vendor/industry best practices; assess current capabilities against the Agency's security/logging regulations at regular intervals and perform gap analyses.</li> <li>Migrate/implement ELS/SIEM architecture in cloud and/or on-premise environments; architect and integrate streaming processing solutions for data onboarding/ingestion.</li> <li>Develop implementation plans (including communications plans) for approved enhancements; conduct/verify test configurations and present change requests at Change Control Board meetings.</li> <li>Onboard newly added systems into the ELS/SIEM (data design requirements, data collection, ingestion scheduling/testing) in coordination with System Owners/ISSOs and the Government ELS Team Lead.</li> <li>Create dashboards for System Owners, ISSM/ISSO, executive management, and developers; maintain a Master Project Schedule reviewed bi-weekly with Government leadership.</li> <li>Maintain the SIEM's collection/aggregation of IDS, firewall, proxy, DLP, antivirus, cloud log, and vulnerability-scanner data sources; operate streaming ingestion/analysis solutions.</li> <li>Develop correlation rules, signatures, and risk-based scoring enhancements; maintain whitelists/blacklists for a better-tuned SIEM.</li> <li>Develop, deploy, and/or integrate Machine Learning (ML) and Artificial Intelligence (AI) into the Agency's ELS/SIEM.</li> <li>Provide general user support for ELS/SIEM dashboard use (including ISSO audit dashboard functionality) and respond to system-outage/data-feed issues.</li> </ul> <p> </p> <p><strong>Basic Qualifications: </strong></p> <ul> <li>Minimum 5 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field 5 years of such experience.</li> </ul> <p> </p> <p><strong>Preferred Certifications: </strong></p> <ul> <li>Splunk Certified Admin</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p> </p> <p><span class="TextRun SCXW225111203 BCX8" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXW225111203 BCX8">As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of <strong>California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia</strong></span></span><span class="TextRun SCXW225111203 BCX8" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXW225111203 BCX8">. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. </span></span><a class="Hyperlink SCXW225111203 BCX8" href="https://www.accenture.com/us-en/careers/your-future-rewards-benefits" target="_blank"><span class="TextRun Underlined SCXW225111203 BCX8" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW225111203 BCX8" data-ccp-charstyle="Hyperlink">You can find m