Sr. SIEM Engineer (Elastic + Confluent)
$160.7k/y-$306.5k/y
2 days ago
Highlight
OnsiteFull-timeSenior
Summary
Accenture Federal Services is seeking a Sr. SIEM Engineer (Elastic + Confluent) to join their team in Fort Belvoir, VA. The role focuses on the consolidation of multiple SIEM solutions into one consolidated SIEM, requiring extensive experience in SIEM deployment and tuning.
About the Role
As a Sr. SIEM Engineer, you will design, deploy, configure, and maintain Elastic stack and Confluent deployments. Your responsibilities will include managing and upgrading systems, tuning Elastic stack deployments, creating custom visualizations and dashboards, developing alerting solutions, and running day-to-day operations of the security operations center. You will also investigate incidents and lead response efforts as necessary.
About You
Required:
- Secret clearance is required to maintain this position.
- Compliance with one of the DoD 8140 / 8570 IAT Level II certification prior to start date (CompTIA Security+ CE, CySA+, CCNA Security, GSEC, GICSP).
- 3+ years of hands-on experience in deployment, configuration, and solution development using the Elastic Stack for security and logging use-cases.
- Demonstrated experience with the full Elastic Stack: Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and REST API integration.
- Experience in developing data structures and data mapping from various sources to achieve data normalization using Elastic Common Schema.
- Experience developing Logstash and/or Elastic Ingest Pipelines.
- Experience developing custom visualizations and dashboards using Kibana.
Preferred:
- Experience using and developing Ansible playbooks for automation of system deployment and/or configuration.
- Experience with developing in multiple languages (Python, Bash, PowerShell, Painless, etc.).
- Understanding of the MITRE ATT&CK framework.
- Experience with cloud environments (e.g., Azure, AWS, GCP, etc.) and cloud security architecture.
- Experience integrating Elasticsearch with external systems (e.g., SOAR tools, Threat Intel Platforms).
- Experience with data management: hot/warm/cold architectures, shared allocation/re-allocation, snapshots & restoration.
- Strong experience with evaluating existing Elastic clusters, configuration parameters, indexing, search and query performance tuning.
Benefits
- Competitive salary range of $160,700—$306,500 USD.
- Comprehensive benefits package including health, dental, and vision coverage.
- Opportunities for hands-on experience, certifications, and industry training.
Accenture Federal Services
We power reinvention across the US federal government to help agencies deliver greater outcomes using proven commercial solutions, mission expertise, and new technologies – cloud, data and AI, platforms and cyber. It’s how we radically reset problem-solving and help federal leaders deliver breakthrough performance & efficiency with speed and certainty.
Fort Belvoir, VA