Splunk Enterprise Security SME & SOC Architect

Accenture PLC; Washington (District of Columbia); Vor Ort; USD 110.000 - 224.000; Vollzeit

Zusammenfassung

Accenture Federal Services is seeking a Splunk Enterprise Security Subject Matter Expert to manage a large Splunk deployment, optimize architecture, and ensure platform health across extensive log ingestion. You will enhance SOC throughput through expert Splunk knowledge and SIEM-SOAR integrations.

You will onboard logs, tune use cases per MITRE ATT&CK, and lead platform upgrades, training SOC analysts, and delivering capacity reports.

Qualifikationen

• 5 years of SIEM architecture/engineering experience with large-scale deployments.
• Bachelor's degree in Computer Science, Information Technology, or related field (equivalent experience considered in lieu of a degree).
• Deep knowledge of Splunk architecture, SPL, and data onboarding.
• Experience integrating SIEM with SOAR platforms for automated response.

Aufgaben

• Own Splunk Enterprise Security architecture, sizing, and platform health management.
• Develop and tune correlation rules and use cases mapped to the MITRE ATT&CK framework.
• Onboard new log sources and normalize data across a large, diverse endpoint environment.
• Build and maintain SIEM-to-SOAR integrations that drive automated alert enrichment and response.
• Produce Splunk platform performance reporting and capacity‑planning recommendations.
• Support platform upgrades, patching, and lifecycle management.
• Train and mentor SOC analysts on Splunk use and best practices.
• Troubleshoot platform performance and data‑quality issues.

Kenntnisse

SIEM architecture/engineering

Splunk SPL

Data onboarding

SOAR integrations

Log source onboarding

Ausbildung

Bachelor's degree in Computer Science/Information Technology or related field

Tools

Splunk

SOAR

Jobbeschreibung

Accenture Federal Services is seeking a Splunk Enterprise Security Subject Matter Expert to manage a large Splunk deployment, optimize architecture, and ensure platform health across extensive log ingestion. You will enhance SOC throughput through expert Splunk knowledge and SIEM-SOAR integrations.

You will onboard logs, tune use cases per MITRE ATT&CK, and lead platform upgrades, training SOC analysts, and delivering capacity reports.