Cyber Defense Engineer: NDR Platform & SOC Ops

Emploive; Suffolk, Northern (VA, KY); Hybrid; USD 110,000 - 224,000; Full time

Job summary

Accenture Federal Services is seeking a cyber engineer to bridge infrastructure and security operations, deploying and optimizing the platform to provide deep network visibility for a federal SOC environment.

The role requires 5+ years in cybersecurity and network security, plus experience leading Red Teams and scripting in Python to automate telemetry and responses. TS/SCI clearance is required, with compensation ranges disclosed for multiple US locations.

Qualifications

• 5 years of combined cybersecurity and network security experience.
• Experience leading Red Teams.
• Proficiency in scripting languages such as Python to develop custom tools that automate telemetry enrichment and response playbooks.

Responsibilities

• Platform Deployment: Lead the physical, virtual, and cloud-based deployment and the Open NDR SaaS platform across diverse enterprise architectures
• Data Integration & Pipelines: Connect sensor data ingestion pipelines and stream network evidence into existing SOC workflows, SIEM platforms, and XDR/EDR tools (e.g., Splunk, Elastic)
• Detection & Rule Engineering: Tune detection capabilities, customize Zeek scripts, and optimize analytics frameworks (using rulesets like Suricata) to catch advanced attacks and lateral movements.

Skills

Python scripting

Cybersecurity

Network security

Red Team leadership

Tools

Splunk

Elastic

Zeek

Suricata

Job description

Accenture Federal Services is seeking a cyber engineer to bridge infrastructure and security operations, deploying and optimizing the platform to provide deep network visibility for a federal SOC environment.

The role requires 5+ years in cybersecurity and network security, plus experience leading Red Teams and scripting in Python to automate telemetry and responses. TS/SCI clearance is required, with compensation ranges disclosed for multiple US locations.