Vulnerability Assessment Analyst

Accenture Federal Services•Columbia, MD

About The Position

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. Join us to drive positive, lasting change that moves missions and the government forward! As a Vulnerability Assessment Analyst at AFS, you will play a pivotal role in safeguarding critical systems by configuring and executing vulnerability scans, analyzing threat intelligence, and interpreting vulnerability announcements.

Requirements

2 years of experience with any combination of the following:
Experience detecting system and application security threats and vulnerabilities
Experience developing and maintaining security documentation
Ability to configure and conduct vulnerability scans, assess scan results, and prepare reports
Experience supporting information assurance and risk management activities
Experience with program eMASS package, uploading STIG checklists, updating POA&Ms, and securing/maintaining ATO status for the program
Experience with risk assessment and conducting security testing
Hands-on experience supporting and applying the Risk Management Framework (RMF), including System Security Plans (SSP), Plan of Actions and Milestones (POA&M), Security Control Traceability Matrix (SCTM), Risk Assessment Reports (RAR), and Concept of Operations (CONOPS)
Familiarity with incident response and handling methodologies

Nice To Haves

8140 Advanced certification is preferred (at least Basic or Intermediate is required).
Advanced Certifications: Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), CompTIA Cybersecurity Analyst (CySA+), CompTIA SecurityX (formerly CASP+), CyberSec First Responder (CFR), GIAC Certified Penetration Tester (GPEN), GIAC Systems and Network Auditor (GSNA)
Knowledge of network protocols
Knowledge of secure system architecture and system monitoring
Strong security control analysis skills
Experience conducting and troubleshooting vulnerability assessments
Understanding of host and network access controls
Additional certifications

Responsibilities

Evaluating scan results, preparing comprehensive reports, and briefing leadership on the current risk landscape, emerging threats, and vulnerability status.
Collaborating closely with a team of Information System Security Engineers (ISSEs) and Information System Security Officers (ISSOs), providing essential information assurance and risk management support.
Assisting in the development and publication of System Body of Evidence (BOE) artifacts, ensuring that all documentation aligns with security standards and client requirements.