Security Operations Optimization Lead

accenturefederalservices; Washington (District of Columbia); On-site; USD 110,000 - 224,000; Full time

Job summary

Accenture Federal Services in Washington, DC is seeking a dedicated security operations professional to mature SOC operations and enhance threat detection capabilities. The role focuses on managing security tool policies, automating workflows, and developing advanced signatures and alerts while tuning IDS and EDR platforms to improve incident response.

US citizenship is required. The position emphasizes collaboration with cross-functional teams, development of SOC playbooks, ongoing testing of

Qualifications

• 10+ years of experience in a security operations role.
• Strong understanding of SOC processes and tools, including IDS/EDR platforms.
• Experience in automating security processes and developing playbooks.
• Excellent analytical and problem-solving skills.
• Ability to stay current with emerging security trends and technologies.

Responsibilities

• Manage and optimize security tool policies for threat detection and response.
• Automate operational tasks and workflows to enhance SOC efficiency.
• Create and refine advanced security signatures and alerts to improve threat detection.
• Tune and maintain IDS and EDR solutions.
• Develop, review, and enhance SOC playbooks for incident response best practices.
• Research and test new tools and technologies to improve SOC operations and capabilities.

Skills

SOC processes

Automation

Playbooks

IDS/EDR

Analytical thinking

Tools

IDS platforms

EDR platforms

Job description

Accenture Federal Services in Washington, DC is seeking a dedicated security operations professional to mature SOC operations and enhance threat detection capabilities. The role focuses on managing security tool policies, automating workflows, and developing advanced signatures and alerts while tuning IDS and EDR platforms to improve incident response.

US citizenship is required. The position emphasizes collaboration with cross-functional teams, development of SOC playbooks, ongoing testing of