Intrusion Analyst

Accenture Federal Services•San Antonio, TX

11h

About The Position

Accenture Federal Services is dedicated to helping the US federal government enhance national strength and safety, and improve life for its citizens. With over 13,000 employees, the company leverages technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Recognized as a Glassdoor Top 100 Best Place to Work, Accenture Federal Services fosters a collaborative environment that supports growth, learning, and professional development through hands-on experience, certifications, and industry training. The Intrusion Analyst role is critical for cybersecurity, focusing on cyber threat analysis and malware analysis to evaluate network data and malware for identifying threats and vulnerabilities.

Requirements

Associate’s degree + 10 years experience OR
Bachelor’s degree + 8 years experience OR
Master’s degree + 6 years experience OR
PhD + 4 years experience
Hands‑on malware analysis experience
Understanding of TCP/IP and common application‑layer protocols
Knowledge of indicators of attack and indicators of compromise
Experience with Windows and/or Linux architectures
TS/SCI with polygraph level clearance required

Nice To Haves

Experience in JCAC, UCT, NWBC/INWT, Cyber Defense Operations
Programming experience (C, C#, C++, Java, Perl, Python)
Certifications such as CISSP, CEH, Sec+, Net+, GIAC GREM, CREA
Packet and malware analysis proficiency
Basic data parsing skills (ex: Excel, grep, sed, awk, regex)
Ability to analyze network data
Knowledge of project management, incident response lifecycles, network design and security, common cyber‑attacks, and federal incident reporting requirements

Responsibilities

Conduct cyber threat analysis
Perform malware analysis to identify malicious behavior and potential vulnerabilities
Analyze network data and malware to detect threats, indicators of attack (IOA), and indicators of compromise (IOC)
Work independently and deliver timely, high‑quality results without direct supervision
Support incident response activities using cybersecurity tools, processes, and established response lifecycles