Accenture Federal Services

We believe in the power of change, harnessed in ways that matter for our country and communities.

Detection Engineer

Full TimeRemoteTeam 10,001+Since 2017H1B No SponsorCompany SiteLinkedIn

Location

Virginia

Posted

10 hours ago

Salary

$91.3K - $221.1K / year

Bachelor Degree6 yrs expEnglishCyber SecurityFirewallsLinuxPythonTcp/ip

Job Description

• Design, engineer, and implement security detection initiatives under the cybersecurity team lead. • Develop new detection logic for SIEM (Microsoft Sentinel) and network security platforms (Cisco FirePower, IDS/IPS), incorporating AI-driven tooling where applicable. • Write and optimize KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version control of detection logic using Git and GitHub workflows for collaborative development and auditability. • Bridge the gap between network engineering and cybersecurity teams to advocate for secure network designs and maximize security device capabilities. • Conduct technical briefings to enhance team awareness of network architecture and detection strategies. • Collaborate with operations and management to recommend improvements to security posture and ensure compliance with industry and federal standards (e.g., NIST, CISA).

Job Requirements

  • U.S. Citizenship required
  • Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
  • 6 + years experience in information security or equivalent combination of education and work experience
  • 2+ years experience performing event and log analysis across enterprise security tools (AV, IDS/IPS, Firewalls, Active Directory, Web Proxies, DLP, SIEM)
  • Hands-on experience with:
  • Microsoft Sentinel & KQL (minimum 1 year)
  • Cisco FirePower and IDS/IPS configuration (minimum 1 year)
  • SIEM platforms (Sentinel preferred)
  • Detection engineering: designing and tuning signatures for IoCs and IoAs
  • Packet and malware analysis using tools like Wireshark
  • Git and GitHub for detection code version control and collaborative workflows
  • Scripting and parsing (regex, PowerShell, Python, grep, sed, awk)
  • TCP/IP, application layer protocols, and Windows/Linux internals
  • MITRE ATT&CK framework for detection mapping

Benefits

  • Reasonable ranges of compensation for hired roles based on labor costs
  • Wide variety of benefits

Related Categories

Related Job Pages