Cloud Security Engineer - ATO & Threat Modeling

ASM Research, An Accenture Federal Services Company; Frankfort (KY); On-site; USD 120,000 - 132,000; Full time

Job summary

ASM Research, an Accenture Federal Services company, is seeking a Security Engineer to join an Agile team. You will design and maintain security controls for cloud infrastructure, applications, and sensitive data, while leading threat modeling, risk assessments, and ATO activities.

You will collaborate with developers, architects, and leadership to document requirements and drive secure delivery. The role emphasizes security governance, automated workflows, and ongoing program maturation,

Qualifications

• Bachelor's degree and at least four years of federal security operations experience.
• Working knowledge of NIST 800-53 RMF/ATO processes and related controls.
• Familiarity with security governance, A&A packages, and third-party assessments.

Responsibilities

• Design, implement, and maintain security controls for cloud and applications.
• Perform threat modeling, code reviews, and vulnerability analysis.
• Document audit requirements and support ATO processes.
• Develop A&A docs and prepare third‑party assessment packages.
• Track POA&Ms and ensure policy compliance.
• Automate security workflows, including API keys, credentials, cert mgmt.
• Use monitoring tools to assess risk and support rapid incident response.
• Conduct data classification and stay ahead of threats.
• Collaborate with Security Leadership and client CISO to mature program.
• Manage security tasks in Jira and report status.

Skills

Threat modeling

Security risk assessment

Stakeholder liaison

Documentation

Cross-functional collaboration

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Okta

MITRE ATT&CK

CSAM/Xacta/eMASS/CFACTS

Job description

ASM Research, an Accenture Federal Services company, is seeking a Security Engineer to join an Agile team. You will design and maintain security controls for cloud infrastructure, applications, and sensitive data, while leading threat modeling, risk assessments, and ATO activities.

You will collaborate with developers, architects, and leadership to document requirements and drive secure delivery. The role emphasizes security governance, automated workflows, and ongoing program maturation,