Vulnerability Management Engineer – Federal Security

Accenture Federal Services; Washington (District of Columbia); On-site; USD 106,000 - 221,000; Full time

Job summary

Accenture Federal Services, a technology firm within Accenture, is seeking a Security Engineer – Vulnerability Management Specialist in the Washington, DC area. You will manage the vulnerability program, collaborate with IT teams and ISSOs, and help drive ATO readiness through repeatable processes.

Responsibilities include assessing vulnerabilities across systems and cloud, validating RMF artifacts, and guiding remediation with stakeholders.

Qualifications

• 4–6 years in vulnerability management or related security role
• Advanced knowledge of vulnerability tools (Nessus, Qualys, Rapid7) and scanning
• Familiarity with NIST 800-53, OWASP Top 10
• Experience with cloud environments and IdP integration

Responsibilities

• Manage and mature the vulnerability management program across environments
• Identify, assess, and prioritize vulnerabilities in apps, networks, endpoints, and cloud
• Collaborate with ISSOs and Controls Assessors to validate RMF artifacts
• Refine control statements and ensure accurate assessment documentation
• Support compliance with NIST, FISMA, and SOX; implement best practices for patching and hardening
• Assist in incident response and provide remediation guidance
• Establish repeatable vulnerability workflows for ATO readiness

Skills

Vulnerability management

NIST 800-53

Vulnerability scanning

CVSS

Cloud Platforms

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or related

Tools

Tenable Nessus

Qualys

Rapid7

OpenVAS

Job description

Accenture Federal Services, a technology firm within Accenture, is seeking a Security Engineer – Vulnerability Management Specialist in the Washington, DC area. You will manage the vulnerability program, collaborate with IT teams and ISSOs, and help drive ATO readiness through repeatable processes.

Responsibilities include assessing vulnerabilities across systems and cloud, validating RMF artifacts, and guiding remediation with stakeholders.