Detection Engineer: SIEM & Network Security Expert

Accenture Federal Services; United States; À distance; USD 91 000 - 221 000; Plein temps

Résumé du poste

Accenture Federal Services seeks a Detection Engineer to strengthen the Cyber Incident Response Team. You will design and implement detection logic for SIEM (Microsoft Sentinel) and network security platforms, write KQL queries, and tune detections for timely, accurate threat alerts.

Responsibilities include collaborating with network engineering, conducting briefings, and ensuring compliance with standards such as NIST and CISA.

Qualifications

• 6+ years of information security experience or equivalent.
• Experience with event and log analysis across enterprise security tools (AV, IDS/IPS, Firewalls, Active Directory, Web Proxies, DLP, SIEM) required.

Responsabilités

• Design, engineer, and implement security detection initiatives under the cybersecurity team lead.
• Develop new detection logic for SIEM (Microsoft Sentinel) and network security platforms.
• Write and optimize KQL queries for Sentinel to improve detection fidelity and reduce false positives.
• Tune detection sets to raise security-relevant events for triage and response teams.
• Maintain version control of detection logic using Git and GitHub workflows.
• Bridge gaps between network engineering and cybersecurity teams to secure designs.
• Conduct technical briefings to enhance team awareness of architecture and detection strategies.
• Collaborate with operations to improve security posture and compliance (NIST, CISA).

Connaissances

Event and log analysis

SIEM

Detection engineering

Networking knowledge

Scripting and parsing

MITRE ATT&CK mapping

Collaboration across teams

Communication

Formation

Bachelor's degree in Cybersecurity or Computer Science

Outils

Microsoft Sentinel

KQL

Cisco FirePower

IDS/IPS

Git & GitHub

PowerShell

Python

Wireshark

regex/grep/sed/awk

Description du poste

Accenture Federal Services seeks a Detection Engineer to strengthen the Cyber Incident Response Team. You will design and implement detection logic for SIEM (Microsoft Sentinel) and network security platforms, write KQL queries, and tune detections for timely, accurate threat alerts.

Responsibilities include collaborating with network engineering, conducting briefings, and ensuring compliance with standards such as NIST and CISA.