Cyber Analyst

Accenture Federal Services•Hill Air Force Base, UT

7h•$91,700 - $178,700•Onsite

About The Position

Accenture Federal Services is seeking a Cyber Analyst to join their team and support their client at Hill AFB in Utah. This role focuses on continuous security monitoring, threat detection, incident response, and threat hunting across mission-critical, multi-classification environments. The Cyber Analyst will work within the Cyber Defense Branch alongside other Cyber Analysts, monitoring SIEM telemetry, triaging alerts, and investigating suspicious activity, while coordinating closely with the Security Engineering and ISSO Branches on remediation and reporting. The ideal candidate brings hands-on security monitoring or SOC/NOC experience and is comfortable operating in a fast-paced, mission-focused environment with shift-based coverage expectations.

Requirements

2 years of experience in a security monitoring, SOC/NOC, or cyber defense analyst role
Hands-on experience with SIEM platforms (Splunk preferred) for monitoring and investigation
TCP/IP networking and network security fundamentals
Experience with threat hunting methodologies and frameworks (e.g., MITRE ATT&CK)
Familiarity with incident response processes and documentation standards
CompTIA Security+ (current) or equivalent security certification

Nice To Haves

DoD 8570 CSSP Analyst certification (or equivalent), such as GCIA or CySA+
Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, or related field (relevant certifications considered in lieu of degree)
Familiarity with STIG compliance tools (e.g.: SCAP Compliance Checker, Evaluate-STIG)
Working knowledge of vulnerability management tools (e.g.: Nessus/ACAS)
Familiarity with container security (Docker/Kubernetes/ECS/EKS/AKS)
Experience with cloud security monitoring in AWS or Azure environments
Demonstrated ability to work effectively in agile, fast-paced environments

Responsibilities

Monitor SIEM platforms (Splunk preferred) for security events and anomalous activity across mission systems
Triage and investigate security alerts, escalating confirmed incidents per established procedures
Perform proactive threat hunting to identify indicators of compromise not caught by automated detection
Participate in incident handling and response activities, documenting findings and recovery actions
Support root-cause investigation for confirmed security incidents
Coordinate with the ISSO Branch and ISSM on incident reporting and tracking recovery actions to closure
Support vulnerability scanning and assessment activities using tools such as Nessus/ACAS
Assist with STIG compliance verification using SCAP Compliance Checker or Evaluate-STIG
Contribute findings to POA&M tracking and remediation coordination
Operate within an Agile framework — participate in sprints, standups, and retrospectives
Document detection logic, playbooks, and investigation procedures for team-wide use
Partner with Security Engineers on detection tuning and telemetry improvements