Information System Security Engineer (ISSE)

Accenture Federal Services•Huntsville, AL

3d•$103,200 - $196,400

About The Position

Accenture Federal Services is looking for an Information System Security Engineer (ISSE) to design, implement, and maintain the security architecture and controls for cloud-based client systems supporting the program. You'll build and operate the security tooling — SIEM, vulnerability management, automation — that keeps systems compliant and secure, and provide the technical engineering input that supports RMF/JSIG authorization activities.

Requirements

3+ years of experience implementing NIST 800-53 controls and the Risk Management Framework (RMF), including at least 1 year of hands-on experience administering security tooling such as SIEM (Splunk), vulnerability management (Nessus/ACAS), or security automation (Ansible, Terraform, PowerShell, Bash, or Python)
2+ years of experience with virtualization or cloud environments (AWS or Azure)
DoD 8570 IASAE Level II certification (e.g., CISSP, CASP+), or DoD 8140 equivalent
Bachelor's or Associate degree in Computer Science, Cybersecurity, or a related technical field, or 4+ years of relevant job or military experience in lieu of degree
Active TS clearance required; SCI preferred

Nice To Haves

AWS or Azure technical certifications, or Splunk-specific certifications (e.g., Splunk Certified Architect, Splunk Enterprise Security Certified Admin)
Experience with a security incident response team (NOC/SOC)
Familiarity with container security (Docker, Kubernetes, ECS/EKS/AKS)
JSIG or ICD 503 compliance knowledge
Experience working in a DevSecOps project environment
Familiarity with National Security systems and air-gapped environments

Responsibilities

Design and implementation of security controls across cloud-based systems — identity and access management, encryption, and network security
Security tooling engineering and administration — SIEM (Splunk), vulnerability management (Nessus/ACAS), and STIG compliance tools
Security-as-code automation for deploying and configuring security tooling (Ansible, Terraform, PowerShell, Bash, or Python)
Technical input into RMF authorization artifacts — SSP, SCTM, POA&Ms, and Risk Assessment Reports — supporting the authorization package
Incident detection engineering — developing detections, tuning alerts, and improving telemetry to support incident response
Technical compliance review of new and existing systems against IA directives, including protection of data across classification levels