Looking for a job

Tim Clemmons

@timclemmons

SIEM Security Analyst at Accenture Federal Services developing ArcSight detections and hunting threats with MITRE ATT&CK.

United States

Message

At Accenture Federal Services, I analyze security events in ArcSight ESM and develop correlation rules, alerts, dashboards, and detection logic. I also hunt threats and investigate incidents using indicators of compromise, threat intelligence, and MITRE ATT&CK.

At Sandy Spring Bank, I triaged security events, created correlation searches, and supported incident response, including phishing detection and mailbox reviews. I also developed CSOC procedures, reports, and playbooks.

At ECS Federal, LLC, I investigated malware incidents and conducted threat hunting across bureau networks and hosts. I used SIEM alerts and security tools to identify risks and support remediation.

Earlier, I conducted incident response and forensic investigations at Insight Global, Leidos, and Allstate, and investigated malware at Duke Energy. My experience also includes network administration at Leidos Inc. and system engineering at Bank of America.

Experience

Work history, roles, and key accomplishments

Current

SIEM Security Analyst

Current

Accenture Federal Services

Feb 2026 - Present (8 months)

Analyze and correlate security events within ArcSight ESM SIEM platforms to identify threats and support incident response. Develop and maintain correlation rules, dashboards, and detection logic to improve visibility and reduce false positives.

ArcSight SIEM Correlation Rules Threat Hunting Incident Response Vulnerability Assessment Tenable.Sc Trellix Epo MITRE ATT&CK

Cybersecurity Analyst – CSOC

Sandy Spring Bank

Jun 2024 - Feb 2026 (1 year 8 months)

Conducted event triage, in-depth analysis, and content validation to enhance detection capabilities and reduce false positives. Managed incident response procedures, including phishing detection and ServiceNow ticket resolution, and developed SOPs and response playbooks.

SIEM Threat Hunting Incident Response Phishing Detection ServiceNow SOP Development Zero Trust NAC EDR Dashboard Development

Cybersecurity Analyst – ESOC

ECS Federal, LLC

Jun 2022 - Jun 2024 (2 years)

Investigated and resolved malware incidents on bureau networks and hosts using SIEM alerts and security tools. Conducted vulnerability scans, threat hunting, and delivered daily briefings to leadership on security events.

Splunk SentinelOne SIEM Malware Analysis Vulnerability Scanning Threat Hunting MITRE ATT&CK Incident Response

Cyber Incident Responder

Insight Global

Dec 2020 - Jun 2022 (1 year 6 months)

Utilized Wireshark and TCPdump to capture and analyze network traffic packets for threat detection. Performed static, dynamic, and forensic analysis on malware and conducted live box forensic investigations on host endpoints.

Wireshark Tcpdump Malware Analysis Digital Forensics SIEM Cyber Kill Chain Incident Response

Cyber Threat Analyst Tier 2

Leidos

Mar 2020 - Nov 2020 (8 months)

Utilized Splunk Enterprise SIEM to proactively identify and remediate daily incident response events. Conducted investigations using the Cyber Kill Chain framework and performed live box forensic investigations with end-user agents.

Splunk SIEM Incident Response Cyber Kill Chain Digital Forensics Cylance Tanium Absolute PowerShell

Cybersecurity Analyst/Jr. Forensic Analyst

Allstate

Feb 2018 - Mar 2020 (2 years 1 month)

Managed Proofpoint tools for phishing detection and response. Conducted live and dead box forensic investigations using CrowdStrike Falcon and FTK Imager, and developed documentation for a new Security Operations department.

ProofPoint Phishing Detection Digital Forensics CrowdStrike Falcon Cloud Security FTK Imager Documentation

Cybersecurity Analyst

Duke Energy

Dec 2016 - Feb 2018 (1 year 2 months)

Investigated and resolved malware incidents using ArcSight SIEM and other security tools. Maintained and optimized core security systems to ensure compliance with regulatory changes.

ArcSight Malware Analysis Security Compliance

System Engineer

Bank of America

Jan 2016 - Dec 2016 (11 months)

Monitored Citrix WAF, Tipping Point IDS/IPS, and F5 Load Balancers to ensure optimal network performance. Conducted troubleshooting of incidents impacting network capacity and availability.

Citrix WAF Tipping Point IDS IPS F5 LTM Network Troubleshooting

Network Administrator

Leidos Inc.

Sep 2014 - Dec 2015 (1 year 3 months)

Configured Cisco routers and switches to provide secure communications for ISR missions. Maintained Windows Server 2008 systems to ensure platform stability for critical operations.

Cisco Routers Cisco Switches Windows 2008 Network Security