Information System Security Engineer

Accenture Federal Services•Colorado Springs, CO

1d•$116,900 - $243,100•Hybrid

About The Position

Accenture Federal Services is seeking an Information System Security Engineer to join their team and support their client on a hybrid schedule. The ISSE will work as part of a team reviewing and assessing Risk Management Framework (RMF) authorization body of evidence for classified information systems, to include: System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Continuous Monitoring Plan, Incident Response Plan, Access Control Plan, Security Assessment Plan, etc. The role involves reviewing new and existing systems for technical compliance with IA directives and protection of data at all classification levels including SCI, advising on in-depth security design review and threat/risk assessments, providing inputs to technical artifacts, and conducting site visits and assessments to inspect IA plans and security control implementations and support Incident Response Team (IRT) activities.

Requirements

4 years of experience implementing NIST 800-53, Rev 4 and/or the Risk Management Framework (RMF)
4 years of experience with Windows and/or Linux environments
4 years of experience with virtualization or cloud environments
2 years of using information security and assurance practices and principles
Experience with Splunk
DoD 8140 compliance (e.g. Security+, CISSP, CASP, etc.)
Must have a TS/SCI level clearance

Nice To Haves

ACAS/Nessus for scanning experience
Experience utilizing SIEM/Splunk to configure and operate SIEM, create dashboards, reports
Experience with Incident handling procedures
Other Security related certification (Cloud, SIEM, forensics, Linux, Windows, etc)
Experience working in a DevSecOps project environment
Formerly or currently a system administrator, developer, or engineer
JSIG or ICD 503 compliance
Strong verbal and written communication skills
Able to engage with users in a professional manner and present technical concepts plainly to semi-technical customers
Ability to interface with seasoned Government personnel
Ability to work in a matrixed team environment and support multiple different efforts as needed
Desire to learn new technologies and tools and willing to share your experience with the team

Responsibilities

Review new and existing systems for technical compliance with IA directives and protection of data at all classification levels including SCI
Advise on in-depth security design review and threat/risk assessments
Provide inputs to technical artifacts, including Plans of Action and Milestones (POA&Ms), Security Control Traceability Matrices (SCTM), and Risk Assessment Reports (RARs)
Conduct site visits (as required) and assessments to inspect IA plans and security control implementations and support Incident Response Team (IRT) activities