Information System Security Engineer (ISSE)

Accenture Federal Services • Los Angeles, CA

1d

About The Position

At Accenture Federal Services, our mission is to help the US federal government make the nation stronger and safer, and improve lives through technology and ingenuity. We are seeking an Information System Security Engineer (ISSE) to join our team. In this role, you will review and assess Risk Management Framework (RMF) authorization body of evidence for classified information systems. This includes evaluating documents such as the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Continuous Monitoring Plan, Incident Response Plan, Access Control Plan, and Security Assessment Plan.

Requirements

• DoD 8570 IAT Level II certification or higher (e.g., Sec+, CISSP, CASP, etc.).
• 5 years of implementing NIST 800-53, Rev 4 and the Risk Management Framework (RMF).
• 5 years of experience with Windows and/or Linux environments.
• 3 years of experience with virtualization or cloud environments (AWS preferred).
• 2 years of using information security and assurance practices and principles.
• Experience with ACAS/Nessus for scanning & SIEM/Splunk to configure.
• Strong verbal and written communication skills.
• Able to engage with users in a professional manner and present technical concepts plainly to semi-technical customers with seasoned Government personnel.
• Ability to work in a matrixed team environment and support multiple different efforts as needed.
• Desire to learn new technologies and tools and willing to share your experience with the team.
• Must have an active TS/SCI level clearance.

Nice To Haves

• Incident handling procedures.
• Experience with Terraform & Ansible.
• Other Security related certification: (Cloud, SIEM, forensics, Linux, Windows, etc).
• Experience working in a DevSecOps project environment.
• Formerly or currently a system administrator, developer, or engineer.
• Experience with MS Active Directory, McAfee, Windows, Linux, AWS Security, etc.
• JSIG or ICD 503 compliance.

Responsibilities

• Review new and existing systems for technical compliance with IA directives and protection of data at all classification levels, including SCI.
• Advise on in-depth security design review and threat/risk assessments.
• Provide inputs to technical artifacts, including Plans of Action and Milestones (POA&Ms), Security Control Traceability Matrices (SCTM), and Risk Assessment Reports (RARs).
• Conduct site visits and assessments to inspect IA plans and security control implementations.
• Support Incident Response Team (IRT) activities.

Benefits

• Hands-on experience, certifications, industry training and more.
• Collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive.
• Wide variety of benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed