Detection Engineer

The role

The Detection Engineer will work on the Cyber Incident Response Team within the Information Security organization. You will design, engineer, and implement security detection initiatives and develop detection logic for SIEM and network security platforms.

What you will do

• Design, engineer, and implement security detection initiatives
• Develop new detection logic for SIEM and network security platforms
• Write and optimize KQL queries for Sentinel
• Tune detection sets to raise security-relevant events
• Maintain version control of detection logic using Git and GitHub
• Bridge the gap between network engineering and cybersecurity teams
• Conduct technical briefings to enhance team awareness
• Collaborate with operations and management to recommend security improvements

Required qualifications

• U.S. Citizenship required
• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
• 6 + years experience in information security or equivalent combination of education and work experience
• 2+ years experience performing event and log analysis across enterprise security tools
• Microsoft Sentinel & KQL (minimum 1 year)
• Cisco FirePower and IDS/IPS configuration (minimum 1 year)
• Detection engineering: designing and tuning signatures for IoCs and IoAs
• Packet and malware analysis using tools like Wireshark
• Git and GitHub for detection code version control and collaborative workflows
• Scripting and parsing (regex, PowerShell, Python, grep, sed, awk)
• TCP/IP, application layer protocols, and Windows/Linux internals
• MITRE ATT&CK framework for detection mapping

Nice to have

• Threat hunting and automation experience
• Familiarity with cloud security monitoring (Azure, AWS)
• Certifications such as GIAC GCIA, GCED, or Microsoft Security Operations Analyst Associate
• SIEM platforms (Sentinel preferred)

Benefits

• Certifications
• Industry training
• Hands-on experience

Before you apply

• U.S. Citizenship required
• Applicants must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States
• Candidates currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration

About the company

Accenture Federal Services is a technology company within global Accenture that helps the US federal government. It is recognized as a Glassdoor Top 100 Best Place to Work.