Information System Security Officer (ISSO)

Accenture Federal Services•Hill Air Force Base, UT

2d•$91,700 - $178,700

About The Position

Accenture Federal Services is seeking an experienced Information System Security Officer (ISSO) to support secure Department of Defense (DoD) cloud systems and programs. The ISSO will assume responsibility for ensuring compliance, monitoring cybersecurity posture, supporting RMF/JSIG accreditation, and assisting the Information System Security Manager (ISSM) in the protection of classified systems. This position requires hands-on technical expertise, familiarity with risk management processes, and the ability to coordinate across development, operations, and security teams.

Requirements

DoD 8570 IAT Level II certification, such as Security+
3 years of experience in an ISSO or equivalent security role
Hands-on user experience (3 years combined) with: SIEM platforms (Splunk preferred), Vulnerability management tools (ex: Nessus/ACAS), Compliance and reporting tools (ex: SCAP Compliance Checker, Evaluate-STIG, DISA STIGs, eMASS)
Experience with RMF/JSIG accreditation lifecycle, control implementation, and/or continuous monitoring
Must have an active Top Secret clearance

Nice To Haves

Experience performing risk analysis, vulnerability assessments, and/or security audits
Technical writing experience to support documentation responsibilities
Experience with TCP/IP networking and network security
DoD 8570 IAM Level II certification, such as CASP+ or CISSP
Cloud services experience (ex: Azure, AWS)
AWS or Azure technical certifications
Bachelor’s degree in Computer Science, Information Assurance, Cybersecurity, or related field
Experience with Microsoft Defender or Trellix (ePO) endpoint security platforms
Experience with security incident response teams (NOC/SOC)
Familiarity with container security (Docker/Kubernetes/ECS/EKS/AKS)
Excellent communication skills for engaged with government leadership
Proactive and agile mindset to improving system security posture and team efficiency
Ability to balance security requirements with operational efficiency

Responsibilities

Perform continuous monitoring, vulnerability assessment, and risk analysis, validating remediation actions and documenting POA&M updates
Maintain the operational security posture consistent with the security authorization package and ATO requirements
Verify user clearance, need-to-know, and security responsibilities prior to system access
Ensure audit records are captured, reviewed regularly, and anomalies documented
Conduct regular system security reviews to ensure compliance with security authorization and STIG/CIS benchmarks and baselines
Develop, sustain, and maintain RMF documentation packages (SSP, SAP, SAR, POA&M, ConMon)
Support development and sustainment of Authorization to Operate (ATO) packages and Body of Evidence (BoE)
Coordinate hardware/software/firmware changes with the ISSM and AO/DAO, notifying stakeholders of security-relevant changes
Collaborate with Security Engineers, DevOps, and IT operations teams during the system design, integration, and development phases to evaluate risk and ensure compliance, including Zero Trust Architecture (ZTA) requirements
Implement cloud-native security solutions such as encryption, IAM, network segmentation
Participate in incident handling, reporting security incidents to ISSM, and tracking recovery actions to ensure controls are restored correctly
Engage with Change Control Board (CCB) if delegated by ISSM
Ensure compliance with STIGs, utilizing SCAP Compliance Checker, Evaluate-STIG, and other DoD cyber assessment tools
Assist the ISSM in all cybersecurity-related duties and assume ISSM responsibilities in their absence