Information Systems Security Engineer

Accenture Federal Services•Arlington, VA

18h

About The Position

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. Join us to drive positive, lasting change that moves missions and the government forward! Accenture Federal Services is seeking an Information Systems Security Engineer (ISSE) to join our team in the Arlington, VA area to support cybersecurity authorization and assessment activities for classified information systems in accordance with the Risk Management Framework (RMF). This role works as part of a highly specialized team reviewing and validating RMF authorization body of evidence, performing technical compliance analysis, inspecting security control implementations, and supporting incident response activities. The ISSE ensures systems comply with federal IA directives, protect data across all classification levels (including SCI), and meet required security design, control, and documentation standards. The ISSE also contributes to key RMF artifacts such as SSPs, SCTMs, POA&Ms, RARs, and continuous monitoring documentation.

Requirements

DoD 8570 IAT Level II or higher (ex: Security+, CISSP, CASP, etc.)
4 years of experience implementing NIST 800‑53 Rev. 4 and supporting full RMF lifecycle activities
4 years’ experience with Windows and/or Linux operating environments
4 years’ experience with virtualization or cloud environments
2 years’ experience working with information security and IA practices/principles
Experience with tools such as: MS Active Directory Splunk ACAS/Nessus McAfee Windows/Linux OS AWS Security tools
Must possess an active TS/SCI security clearance

Nice To Haves

ACAS/Nessus scanning experience
Experience configuring and operating SIEM/Splunk tools; creating dashboards and reports
Experience with incident handling procedures
Additional security certifications (Cloud, SIEM, Forensics, Linux, Windows, etc.)
Experience working in DevSecOps project environments
Previous experience as a system administrator, developer, or engineer
Experience with JSIG or ICD 503 compliance
Strong written and verbal communication skills; ability to interface professionally with government personnel
Ability to collaborate in a matrixed team environment and support multiple concurrent efforts
Strong desire to learn new tools and technologies and share knowledge with team members

Responsibilities

Review and assess RMF authorization packages and body of evidence, including: System Security Plan (SSP) Security Control Traceability Matrix (SCTM) Continuous Monitoring Plan Incident Response Plan Access Control Plan Security Assessment Plan, and other artifacts
Review new and existing systems for technical compliance with IA directives and ensure protection of classified data (up to SCI)
Advise on in‑depth security design reviews, threat assessments, and risk assessments
Provide inputs to technical artifacts including POA&Ms, SCTMs, and Risk Assessment Reports (RARs)
Conduct site visits and security assessments to inspect security control implementations
Support Incident Response Team (IRT) activities and assist with incident analysis and reporting
Apply RMF knowledge to ensure security controls meet NIST 800‑53 requirements and RMF process expectations
Coordinate with government stakeholders, system owners, and engineering teams to ensure RMF compliance
Communicate technical concepts clearly to both technical and semi‑technical audiences, including government personnel
Work within a matrixed environment, supporting multiple efforts and priorities
Perform research and remain current with evolving security threats, technologies, and compliance requirements