Information System Security Engineer

Accenture Federal Services•Fort Meade, MD

1d•Onsite

About The Position

Accenture Federal Services is seeking an Information System Security Engineer to join their team and support their client in the Ft. Meade, MD area. This role involves working as part of a team to review and assess Risk Management Framework (RMF) authorization body of evidence for classified information systems. The engineer will review new and existing systems for technical compliance with IA directives and protection of data at all classification levels, including SCI. They will also advise on in-depth security design review and threat/risk assessments, provide inputs to technical artifacts, and collaborate with ISSM and Cloud Engineers to support critical customer systems. Ensuring systems are operated, maintained, and disposed of in accordance with security policies and procedures, and performing reviews of audit logs and continuous monitoring tools are also key responsibilities.

Requirements

3 years of experience supporting the accreditation of cloud-based systems
2 years of experience using Risk Management Framework (RMF)
Experience with Windows and/or Linux environments
2 years of experience with virtualization or cloud environments
2 years of using information security and assurance practices and principles
DoD 8570 IAT Level II certification or higher (Sec+, CISSP, CASP, etc.)
Must have an active TS/SCI level clearance

Nice To Haves

Bachelor's degree in a technical degree
CISSP certification
Experience with eMASS

Responsibilities

Work as part of a team reviewing and assessing Risk Management Framework (RMF) authorization body of evidence for classified information systems, to include: System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Continuous Monitoring Plan, Incident Response Plan, Access Control Plan, Security Assessment Plan, etc.
Review new and existing systems for technical compliance with IA directives and protection of data at all classification levels including SCI
Advise on in-depth security design review and threat/risk assessments
Provide inputs to technical artifacts, including Plans of Action and Milestones (POA&Ms), Security Control Traceability Matrices (SCTM), and Risk Assessment Reports (RARs)
Work in close collaboration with ISSM and Cloud Engineers to support the customers critical systems
Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package
Perform review of audit logs and continuous monitoring tools for IT systems to identify anomalies, hacking or insider threats