Cyber Defense Engineer — NSM, SIEM & Open NDR

Socket.dev; Suffolk (VA); On-site; USD 106,000 - 221,000; Full time

Job summary

Accenture Federal Services is seeking a cyber engineer who bridges infrastructure and security operations. The role focuses on deploying, managing, and optimizing the Open NDR SaaS platform to give security teams deep network visibility.

You will lead platform deployment across physical, virtual, and cloud architectures, integrate sensor data into SOC workflows and SIEM/XDR tools, and tune detections using Zeek and analytics frameworks to catch advanced threats.

Qualifications

• 5 years of combined cybersecurity, network security, and systems engineering experience.
• Deep familiarity with NSM, PCAP, encrypted traffic inspection, and the Zeek framework.
• Proficiency in Python to develop custom tools that automate telemetry enrichment and response playbooks.

Responsibilities

• Platform Deployment: Lead the physical, virtual, and cloud-based deployment of the Open NDR SaaS platform across diverse enterprise architectures.
• Data Integration & Pipelines: Connect sensor data ingestion pipelines and stream network evidence into existing SOC workflows, SIEM platforms, and XDR/EDR tools (e.g., Splunk, Elastic).
• Detection & Rule Engineering: Tune detection capabilities, customize Zeek scripts, and optimize analytics frameworks (e.g., Suricata) to catch advanced attacks and lateral movements.

Skills

Cybersecurity experience

Network security monitoring

Packet capture (PCAP)

Zeek framework

Python scripting

Tools

Zeek

Splunk

Elastic

Job description

Accenture Federal Services is seeking a cyber engineer who bridges infrastructure and security operations. The role focuses on deploying, managing, and optimizing the Open NDR SaaS platform to give security teams deep network visibility.

You will lead platform deployment across physical, virtual, and cloud architectures, integrate sensor data into SOC workflows and SIEM/XDR tools, and tune detections using Zeek and analytics frameworks to catch advanced threats.