Cyber Defense Analyst - SIEM & Incident Response

Accenture Federal Services; Riverdale (UT); On-site; USD 92,000 - 179,000; Full time

Job summary

Accenture Federal Services seeks a Cyber Analyst to monitor, detect, and respond to cyber threats at Hill AFB in Utah. The role emphasizes continuous security monitoring across multi‑classification environments and collaboration with the Security Engineering and ISSO branches.

The ideal candidate has hands‑on SOC/NOC experience, familiarity with SIEMs (Splunk preferred), and knowledge of MITRE ATT&CK. Active TOP SECRET clearance is required to apply, with SCI eligibility preferred.

Qualifications

• Hands-on experience with security monitoring, SOC/NOC, or cyber defense analyst roles.
• Experience with SIEM platforms (Splunk preferred) for monitoring/investigation.
• Fundamentals of TCP/IP networking and network security.
• Familiarity with threat hunting methods and MITRE ATT&CK framework.
• Knowledge of incident response processes and documentation standards.

Responsibilities

• Monitor SIEM platforms for security events and anomalies across mission systems.
• Triage and investigate alerts, escalating confirmed incidents.
• Provide proactive threat hunting to identify indicators of compromise.
• Participate in incident handling and recovery actions, document findings.
• Coordinate with ISSO/ISSM on incident reporting and remediation tracking.

Skills

SIEM monitoring

Threat hunting

Incident response

Networking fundamentals

Security+ certification

MITRE ATT&CK

Agile / sprint teamwork

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Nessus/ACAS

SCAP Compliance Checker

Evaluate-STIG

Splunk

Job description

Accenture Federal Services seeks a Cyber Analyst to monitor, detect, and respond to cyber threats at Hill AFB in Utah. The role emphasizes continuous security monitoring across multi‑classification environments and collaboration with the Security Engineering and ISSO branches.

The ideal candidate has hands‑on SOC/NOC experience, familiarity with SIEMs (Splunk preferred), and knowledge of MITRE ATT&CK. Active TOP SECRET clearance is required to apply, with SCI eligibility preferred.