Enterprise Logging Solution (ELS) Engineer (Mid)
About The Position
The Enterprise Logging Solution (ELS)/SIEM Engineer supports the Agency's centralized security monitoring and audit/reporting capabilities. This senior-level role involves analyzing, developing, and testing ELS/SIEM enhancements, integrating streaming-ingestion architecture into cloud and on-premise environments, and onboarding new systems. The engineer will also create dashboards for various stakeholders and maintain a Master Project Schedule. Responsibilities include tuning correlation rules, maintaining whitelists/blacklists, and integrating ML/AI capabilities. Candidates must possess a TS/SCI clearance due to elevated-access programs.
Requirements
- Minimum 5 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, 3 years of such experience.
- TS/SCI clearance is mandatory.
Nice To Haves
- Splunk Certified Admin
Responsibilities
- Analyze, develop, and test proposed ELS/SIEM enhancements using vendor/industry best practices.
- Assess current capabilities against security/logging regulations and perform gap analyses.
- Migrate/implement ELS/SIEM architecture in cloud and on-premise environments.
- Architect and integrate streaming processing solutions for data onboarding/ingestion.
- Develop implementation plans and present change requests at Change Control Board meetings.
- Onboard new systems into ELS/SIEM, including data design requirements and ingestion testing.
- Create dashboards for System Owners, ISSM/ISSO, executive management, and developers.
- Maintain the SIEM's collection of IDS, firewall, proxy, DLP, antivirus, cloud log, and vulnerability scanner data sources.
- Develop correlation rules, signatures, and risk-based scoring enhancements.
- Develop, deploy, and integrate ML and AI into the Agency's ELS/SIEM.
- Provide user support for ELS/SIEM dashboard use and respond to system outages/data-feed issues.
Benefits
- Accenture Federal Services offers a wide variety of benefits.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
