Information Security Systems Engineer (ISSE)

Accenture Federal Services Careers Marketplace; United States; On-site; USD 106,000 - 221,000; Full time

Job summary

Accenture Federal Services seeks a Mid-level Information System Security Engineer (ISSE) to bridge business objectives and cybersecurity strategies across portfolios. You will collaborate with project teams and the internal CISO org to integrate security into operations, leveraging RMF, NIST SP 800-171, and related controls.

Your work includes building security evidence, developing ATO packages, and communicating technical concepts to both technical and non-technical stakeholders in a dynamic

Qualifications

• Bachelor's degree or equivalent experience (4 years) required.
• 2-5 years configuring and securing systems to meet Security requirements (Controls, STIGs).
• 3+ years conducting A&A using RMF across all 6 steps.
• 2-5 years administering risk management in enterprise or tactical environments.

Responsibilities

• Develop and maintain bodies of evidence (BOE) for information systems, services, and networks.
• Understand and implement Client Data Program (CDP) with project teams.
• Develop and disseminate system security policies and governing documents.
• Conduct internal vulnerability assessments and coordinate external audits of security controls.
• Coordinate security tasks across Program Management, Engineering, and Software Development.

Skills

Risk management

RMF

A&A

Vulnerability assessments

SDLC

Security controls

Communication

Threat detection

Education

Bachelor's degree or equivalent experience

Tools

Microsoft Office Suite

Job description

AFS is seeking a highly motivated, Mid-level Information System Security Engineer (ISSE)

AFS is seeking a highly motivated, Mid-level Information System Security Engineer (ISSE). This role works with the portfolio they are tied to and internal CISO organization, and is pivotal in bridging the gap between business objectives and cybersecurity strategies. The primary responsibility will be to collaborate with various teams in the organization to ensure the seamless integration of security practices into business operations (i.e. portfolios). The ideal candidate will have working knowledge of various NIST guidance and frameworks such as NIST's Risk Management Framework (RMF), and NIST SP 800-171.

The work

To excel in this role, you will need a strong foundation in risk management and problem-solving, as these skills will be critical in identifying vulnerabilities and implementing effective countermeasures that project teams can use to supplement their security knowledge. Familiarity with tools and processes related to threat detection, vulnerability assessments, and supply chain risk management will be highly advantageous. Additionally, experience working in cross-functional teams and collaborating with technical experts in security engineering and architecture will help you navigate the complexities of this role. Your ability to communicate effectively with both technical and non-technical stakeholders will be essential in driving security initiatives forward and fostering a culture of cybersecurity awareness across the organization.

Key responsibilities include:

• Work with project teams to develop and maintain bodies of evidence (BOE) for information systems, custom application, services, and networks.
• Understand and implement Client Data Program (CDP) program with project teams.
• Develop and disseminate system security policies, processes, and similarly governing products in service of maintaining a low operational risk posture.
• Conduct internal vulnerability assessments and facilitate external audits of security controls.
• Coordinate security-related tasks and activities across other functional areas, e.g., Program Management, Engineering, Software Development, supply chain risk etc.
• Produce documentation in response to, and satisfaction of information security requirements.
• Develop Authorization to Operate (ATO) packages and ATO supporting documentation, including SSPs, POA&Ms, SCTMs, Certification Test Reports, Briefings, Continuous Monitoring Plan and Training products.
• Conduct Security Impact Analyses (SIA) on System Change Requests for systems that have been authorized by CISO.
• Manage multiple priorities and complex tasks in a dynamic work environment.
• Translate technical concepts to semi-technical clients.

What you need

• Bachelor's degree in a related area or equivalent experience (4 years).
• 2-5 years of experience configuring and securing systems to achieve compliance with Security requirements (Controls, STIGS).
• 3+ years of experience conducting Assessment and Authorization (A&A) using Risk Management Framework (RMF) activities across all 6 steps.
• 2-5 years of expertise administering risk management in an enterprise or tactical environment.
• 5+ years' experience and competency with the Microsoft Office Suite ("e.g., Word, Excel, PowerPoint").
• 2+ years working with and understanding systems, and the Software Development Life Cycle (SDLC).

Bonus if you have

• Security Clearance: Active Secret.
• Experience working with non-traditional IT (e.g., small, purpose-built computers and/or networked sensor equipment).
• Cloud experience (vendor agnostic), FedRAMP knowledge.
• CISSP or equivalent certification.

Compensation

The base pay range for this position in the following locations is shown below:

California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland: $106,300 - $221,100 USD

What We Believe

As a company wholly dedicated to serving the US federal government, we bring together the best talent to help reinvent how federal agencies operate and deliver greater value for their mission and the American people. We have an un