Tier II Attack Sensing & Warning Analyst

Accenture Federal Services; Leesburg (VA); On-site; USD 94,000 - 188,000; Full time

Job summary

Accenture Federal Services is seeking a mid-level Attack Sensing & Warning Analyst to strengthen a federal agency's Tier II SOC analysis function. You will analyze triaged events, help draft executive-level cyber incident reports, and contribute to SOC playbooks.

This role advances technical ownership and requires US citizenship and security experience. You will work with Tier I staff on complex incidents, contribute to detection content, and support DHS/NIST-aligned processes.

Qualifications

• US Citizenship
• 10+ years in cybersecurity or information risk
• BS degree; MS preferred

Responsibilities

• Perform Tier II analysis of security events escalated from Tier I monitoring.
• Support the update of SOC SOPs, ensuring compliance with DHS 4300A and NIST guidance.
• Create and elevate cybersecurity-related investigations to internal (CIRT, CDF) and external entities.
• Support triage of Information/Data Spillage Incident Response efforts and handling/sanitization recommendations.
• Make security content recommendations, including new signatures and signature modifications for SIEM, EDR, and IDS.
• Contribute analysis and drafting support for executive-level Cyber Incident Reports on significant events.
• Assist with monitoring tool health and log ingestion to identify any loss or degradation of monitoring coverage.
• Support ad hoc data calls and enumeration requests, including CISA Binding Operational Directives when relevant to the SOC.

Skills

Tier II analysis

SOP development

Executive reporting

SIEM/EDR/IDS knowledge

Education

BS degree

MS degree

Job description

Accenture Federal Services is seeking a mid-level Attack Sensing & Warning Analyst to strengthen a federal agency's Tier II SOC analysis function. You will analyze triaged events, help draft executive-level cyber incident reports, and contribute to SOC playbooks.

This role advances technical ownership and requires US citizenship and security experience. You will work with Tier I staff on complex incidents, contribute to detection content, and support DHS/NIST-aligned processes.