Enterprise Logging Solution (ELS) Engineer

Accenture Federal Services • Washington, DC

32d • $91,700 - $178,700

About The Position

At Accenture Federal Services, our purpose is to make the US federal government stronger and safer, and to improve people's lives. We are a technology company within global Accenture, with over 13,000 employees dedicated to leveraging technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. We offer a collaborative and caring community where you can grow, learn, and thrive through hands-on experience, certifications, and industry training. Join us to drive positive, lasting change that moves missions and the government forward!

This role supports the Enterprise Logging Solution (ELS)/SIEM environment, which provides centralized security monitoring and audit/reporting capabilities. The ELS/SIEM spans architecture, implementation, and ongoing operations & maintenance, both on-premise and in the cloud. As an engineer, you will analyze, develop, and test proposed ELS/SIEM enhancements, migrate and integrate streaming-ingestion architecture into cloud and on-premise environments, and onboard new systems into the ELS/SIEM. You will build dashboards for various stakeholders and maintain a Master Project Schedule. Day-to-day responsibilities include tuning correlation rules and signatures, maintaining whitelists/blacklists, and integrating ML/AI capabilities into the SIEM.

Requirements

• Minimum 5 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field 5 years of such experience.

Nice To Haves

• Splunk Certified Admin

Responsibilities

• Analyze, develop, and test proposed ELS/SIEM enhancements using vendor/industry best practices; assess current capabilities against the Agency's security/logging regulations at regular intervals and perform gap analyses.
• Migrate/implement ELS/SIEM architecture in cloud and/or on-premise environments; architect and integrate streaming processing solutions for data onboarding/ingestion.
• Develop implementation plans (including communications plans) for approved enhancements; conduct/verify test configurations and present change requests at Change Control Board meetings.
• Onboard newly added systems into the ELS/SIEM (data design requirements, data collection, ingestion scheduling/testing) in coordination with System Owners/ISSOs and the Government ELS Team Lead.
• Create dashboards for System Owners, ISSM/ISSO, executive management, and developers; maintain a Master Project Schedule reviewed bi-weekly with Government leadership.
• Maintain the SIEM's collection/aggregation of IDS, firewall, proxy, DLP, antivirus, cloud log, and vulnerability-scanner data sources; operate streaming ingestion/analysis solutions.
• Develop correlation rules, signatures, and risk-based scoring enhancements; maintain whitelists/blacklists for a better-tuned SIEM.
• Develop, deploy, and/or integrate Machine Learning (ML) and Artificial Intelligence (AI) into the Agency's ELS/SIEM.
• Provide general user support for ELS/SIEM dashboard use (including ISSO audit dashboard functionality) and respond to system-outage/data-feed issues.

Benefits

• Accenture Federal Services offers a wide variety of benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior