Splunk ES SIEM Architect | SOC Optimization & SOAR

Accenture PLC; United States; Remote; USD 110.000 - 224.000; Vollzeit

Zusammenfassung

Accenture Federal Services seeks a Splunk Enterprise Security Subject Matter Expert to manage architecture, sizing, and platform health for a large-scale deployment supporting SOC operations. You will optimize data ingestion and correlation rules across many endpoints to strengthen threat detection.

Lead onboarding of new log sources, build SIEM-to-SOAR integrations, and provide performance reporting and capacity planning.

Qualifikationen

• 5 years of SIEM architecture/engineering experience with large-scale deployments.
• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Deep knowledge of Splunk architecture, SPL, and data onboarding.
• Experience integrating SIEM with SOAR platforms for automated response.

Aufgaben

• Own Splunk Enterprise Security architecture, sizing, and platform health management.
• Develop and tune correlation rules and use cases mapped to MITRE ATT&CK.
• Onboard new log sources and normalize data across a large endpoint environment.
• Build and maintain SIEM-to-SOAR integrations for automated alert enrichment and response.
• Produce Splunk performance reporting and capacity-planning recommendations.
• Support platform upgrades, patching, and lifecycle management.
• Train and mentor SOC analysts on Splunk use and best practices.
• Troubleshoot platform performance and data-quality issues.

Kenntnisse

Splunk

SPL

MITRE ATT&CK

SOC best practices

SIEM architecture

Ausbildung

Bachelor’s degree in CS/IT

Tools

Splunk

SOAR

Jobbeschreibung

Accenture Federal Services seeks a Splunk Enterprise Security Subject Matter Expert to manage architecture, sizing, and platform health for a large-scale deployment supporting SOC operations. You will optimize data ingestion and correlation rules across many endpoints to strengthen threat detection.

Lead onboarding of new log sources, build SIEM-to-SOAR integrations, and provide performance reporting and capacity planning.