Tier II SOC: Attack Sensing & Warning Analyst

Accenture Federal Services; Leesburg (VA); On-site; USD 94,000 - 188,000; Full time

Job summary

Accenture Federal Services seeks a mid-level Attack Sensing & Warning Analyst to strengthen a federal agency's Tier II SOC analysis function. You will perform deeper analysis of triaged events, support SOP development, and help draft executive-level cyber incident reports for high-priority incidents.

This role involves greater technical complexity and ownership, including updating SOC SOPs per DHS 4300A and NIST guidance, contributing to detection content, and mentoring Tier I analysts while

Qualifications

• US Citizenship is required or pending
• 10+ years of related experience in cybersecurity or information risk management
• Minimum of 3 years of Tier II security operations experience

Responsibilities

• Perform Tier II analysis of security events escalated from Tier I monitoring.
• Support the update of SOC SOPs in line with DHS 4300A and NIST guidance.
• Create and escalate cybersecurity investigations to internal teams (CIRT, CDF) and external entities.
• Assist with triage of data spillage incidents and sanitization recommendations.
• Recommend new signatures and signature updates for SIEM, EDR, and IDS.
• Draft executive-level Cyber Incident Reports for significant events.
• Monitor tool health and log ingestion to ensure coverage remains intact.
• Support ad hoc data calls and enumeration requests, including CISA directives when relevant.

Skills

SIEM tuning

EDR detection

Executive incident reports

Mentoring Tier I analysts

Education

BS degree

MS degree

Tools

SIEM

EDR

IDS

Job description

Accenture Federal Services seeks a mid-level Attack Sensing & Warning Analyst to strengthen a federal agency's Tier II SOC analysis function. You will perform deeper analysis of triaged events, support SOP development, and help draft executive-level cyber incident reports for high-priority incidents.

This role involves greater technical complexity and ownership, including updating SOC SOPs per DHS 4300A and NIST guidance, contributing to detection content, and mentoring Tier I analysts while