Detection Engineer: SIEM & Network Security Lead

Accenture; Arlington (VA); On-site; USD 91,000 - 221,000; Full time

Job summary

Accenture Federal Services in Arlington, VA is seeking a Detection Engineer for the Cyber Incident Response Team to design, engineer, and implement security detection initiatives across SIEM and network platforms.

You will write and optimize KQL queries for Microsoft Sentinel, tune detection sets, and manage code with Git/GitHub workflows while collaborating with network and cybersecurity teams to strengthen security posture in alignment with NIST and CISA standards. U.S. citizenship required.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience).
• 6+ years experience in information security or equivalent combination of education and work experience.
• 2+ years experience performing event and log analysis across enterprise security tools (AV, IDS/IPS, Firewalls, Active Directory, Web Proxies, DLP, SIEM).

Responsibilities

• Design, engineer, and implement security detection initiatives under the cybersecurity team lead.
• Develop new detection logic for SIEM (Microsoft Sentinel) and network security platforms (Cisco FirePower, IDS/IPS).
• Write and optimize KQL queries for Sentinel to improve detection fidelity and reduce false positives.
• Tune detection sets to raise security-relevant events for triage and response teams.
• Maintain version control of detection logic using Git and GitHub workflows.
• Bridge the gap between network engineering and cybersecurity teams to advocate for secure designs.
• Conduct technical briefings to enhance team awareness of architectures and detection strategies.
• Collaborate with operations and management to improve security posture and ensure compliance with NIST/CISA standards.

Skills

SIEM

Detection engineering

KQL

Git workflows

PowerShell

Python scripting

Networking basics

Education

Bachelor’s degree in Cybersecurity/CS or related field

Tools

Microsoft Sentinel

Cisco FirePower

IDS/IPS

GitHub

Regex

Job description

Accenture Federal Services in Arlington, VA is seeking a Detection Engineer for the Cyber Incident Response Team to design, engineer, and implement security detection initiatives across SIEM and network platforms.

You will write and optimize KQL queries for Microsoft Sentinel, tune detection sets, and manage code with Git/GitHub workflows while collaborating with network and cybersecurity teams to strengthen security posture in alignment with NIST and CISA standards. U.S. citizenship required.