Cyber Analyst

About the Role

Accenture Federal Services is seeking a Cyber Analyst to support a client at Hill AFB, Utah. This role involves continuous security monitoring, threat detection, incident response, and threat hunting in multi-classification environments. You will work within the Cyber Defense Branch, monitoring SIEM telemetry, triaging alerts, and investigating suspicious activity, with coordination for remediation and reporting with Security Engineering and ISSO Branches.

Key Responsibilities

• Monitoring & Threat Detection
• Monitor SIEM platforms (Splunk preferred) for security events and anomalous activity.
• Triage and investigate security alerts, escalating confirmed incidents.
• Perform proactive threat hunting to identify indicators of compromise.
• Incident Response
• Participate in incident handling and response activities, documenting findings and recovery actions.
• Support root-cause investigation for confirmed security incidents.
• Coordinate with ISSO Branch and ISSM on incident reporting and tracking recovery actions.
• Vulnerability & Compliance Support
• Support vulnerability scanning and assessment activities using tools such as Nessus/ACAS.
• Assist with STIG compliance verification using SCAP Compliance Checker or Evaluate-STIG.
• Contribute findings to POA&M tracking and remediation coordination.
• Collaboration & Continuous Improvement
• Operate within an Agile framework (sprints, standups, retrospectives).
• Document detection logic, playbooks, and investigation procedures.
• Partner with Security Engineers on detection tuning and telemetry improvements.

Requirements & Tech Stack

• 2 years of experience in a security monitoring, SOC/NOC, or cyber defense analyst role.
• Hands-on experience with SIEM platforms (Splunk preferred) for monitoring and investigation.
• TCP/IP networking and network security fundamentals.
• Experience with threat hunting methodologies and frameworks (e.g., MITRE ATT&CK).
• Familiarity with incident response processes and documentation standards.
• CompTIA Security+ (current) or equivalent security certification.

Bonus Points

• DoD 8570 CSSP Analyst certification (or equivalent), such as GCIA or CySA+.
• Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, or related field (relevant certifications considered in lieu of degree).
• Familiarity with STIG compliance tools (e.g., SCAP Compliance Checker, Evaluate-STIG).
• Working knowledge of vulnerability management tools (e.g., Nessus/ACAS).
• Familiarity with container security (Docker/Kubernetes/ECS/EKS/AKS).
• Experience with cloud security monitoring in AWS or Azure environments.
• Demonstrated ability to work effectively in agile, fast-paced environments.

Work Environment & Culture Fit

• Comfortable in a fast-paced, mission-focused monitoring environment.
• Strong attention to detail.
• Solution ownership mindset.
• Fail-fast, fail-forward mindset.
• Willingness to support shift-based or on-call coverage as required.

Security Clearance

• Active TOP SECRET clearance required to apply (SCI eligibility preferred).