Security Engineer

ASM Research, An Accenture Federal Services Company; Bismarck (ND); On-site; USD 120,000 - 132,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, is seeking a Security Engineer to bolster the HIOS Platform Team within a complex federal production environment. You will design, implement, and maintain robust security solutions for cloud infrastructure and sensitive data, driving risk reduction and compliance with industry best practices.

As part of an Agile cross-functional team, you will automate security processes, perform threat modeling, support API key management, and lead

Qualifications

• Bachelor’s degree required; four years of relevant security experience across compliance, identity, networking, systems data, and cloud security.
• Experience researching security issues, developing new security tech solutions, and evaluating risk with monitoring systems and tools.

Responsibilities

• Research security issues and assist in creating new security technology solutions.
• Design and develop scripts to automate security control workflow lifecycle.
• Evaluate overall risk using monitoring systems and tools (Splunk, New Relic, firewall, SIEM, vulnerability scans).
• Develop and implement information security procedures, ensuring compliance with best practices.
• Execute data classifications and security assessments for clients.
• Develop and enforce PKI/API key management policies.
• Manage remediation plans in support of risk goals.
• Conduct threat modeling to identify risks and vulnerabilities.
• Follow CMS security, accessibility, and SDLC requirements.
• Provide security guidance to team members.

Skills

Monitoring

Scripting

Zero Trust Architecture

AWS/Azure

Security Remediation

PKI and API Key Management

Threat Modeling

Certificates Management

Okta

Kali Linux

Red Teaming

Hack-the-Box

Capture-the-Flag

Pen Testing

MITRE ATT&CK Framework

Cloud security principles

Education

Bachelor’s Degree

Tools

Splunk

New Relic

Job description

The Security Engineer will support the security posture of the CMS Health Insurance Oversight System (HIOS) Platform Team, working within a complex federal production environment. This individual will safeguard cloud infrastructure and sensitive data by designing, implementing, and maintaining robust security solutions, playing a crucial role in identifying and mitigating security risks, automating security processes, and ensuring compliance with industry best practices and regulatory requirements.

The Security Engineer will work as part of a cross-functional Agile team and is expected to:

• Research security issues and assist in creating new security technology solutions.

• Design and develop scripts to automate security control workflow lifecycle.

• Evaluate overall risk by utilizing and enhancing monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM, and vulnerability scans).

• Participate in the development and implementation of information security operational and strategic procedures, adhering to industry best practices and compliance requirements.

• Execute large client data classification and security assessments.

• Develop and enforce policies for secure API key generation, storage, and rotation.

• Manage remediation plans in support of risk assessment goals.

• Conduct threat modeling exercises to identify potential security risks and vulnerabilities.

• Follow CMS security, accessibility, documentation, configuration management, and software development lifecycle requirements.

• Provide technical guidance and security knowledge sharing to other team members as appropriate.

Minimum Qualifications

• Bachelor’s Degree

• At least four years of relevant experience across compliance, identity, networking, system data, and cloud security, along with experience researching security issues and assisting in creating new security technology solutions, and experience evaluating overall risk using monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM, and vulnerability scans).

Preferred Skills

• Monitoring solutions (Splunk, New Relic, etc.)

• Scripting

• Zero Trust Architecture

• AWS/Azure

• Security Remediation

• PKI and API Key Management

• Threat Modeling

• Certificates Management

• Okta

• Kali Linux

• Red Teaming

• Hack-the-Box

• Capture-the-Flag

• Pen Testing

• MITRE ATT&CK Framework

• Strong understanding of cloud security principles and best practices.

Bonus if you have:

• CISSP, CCSP, CompTIA Security+, Cloud Security certificate (any CSP), CISA, CCNA, or other security/network certifications

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

$120,000 - 132,000

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, gender identity, veteran status, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, veteran status, disability, gender identity, or age. All decisions on employment are made to abide by the principle of equal employment.