Enterprise Logging Solution (ELS) Engineer (Senior)
Accenturefederalservices · Washington, DC
About this role
**Enterprise Logging Solution (ELS) Engineer (Senior)** **Who you’ll be** The Senior Security Engineer will support the Enterprise Logging Solution (ELS)/SIEM environment to enhance centralized security monitoring and reporting capabilities for the agency. This role includes architecture, implementation, and ongoing operations both on-premise and in the cloud—ensuring compliance with security regulations and integrating advanced solutions such as Machine Learning and Artificial Intelligence. **What you’ll do** - Analyze, develop, and test ELS/SIEM enhancements using industry best practices; perform regular gap analyses. - Migrate and implement ELS/SIEM architecture in cloud and on-premise environments; architect streaming processing solutions for data onboarding. - Develop implementation and communication plans for enhancements; lead testing configurations and present change requests at Change Control Board meetings. - Onboard new systems into the ELS/SIEM in coordination with System Owners and the Government ELS Team Lead. - Create dashboards for System Owners, ISSM/ISSO, executive management, and developers; maintain a bi-weekly reviewed Master Project Schedule. - Maintain SIEM data aggregation from sources such as IDS, firewalls, and vulnerability scanners; operate streaming ingestion solutions. - Develop correlation rules and risk-based scoring enhancements; maintain whitelists/blacklists for optimized SIEM performance. - Integrate ML/AI capabilities into the Agency’s ELS/SIEM. - Provide user support for ELS/SIEM dashboard use and respond to system outage/data-feed issues. **What you need** - Minimum 7 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or 5 years with a bachelor’s degree in related fields. - Active TS/SCI clearance due to elevated-access programs. **Nice to have** - Splunk Certified Architect - Splunk Certified Admin **Pay range (where applicable)** - **$94,000 – $187,600 USD**
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.