Vulnerability Risk & Threat Analyst

Accenture Federal Services; Columbia (MD); On-site; USD 143,200 - 171,300; Full time

Job summary

Accenture Federal Services is seeking a Vulnerability Assessment Analyst to safeguard critical systems by configuring and executing vulnerability scans, analyzing threat intelligence, and interpreting vulnerability announcements.

You will evaluate scan results, prepare reports, and briefing leadership on risk, collaborate with ISSEs/ISSOs on information assurance and risk management, and support documentation such as System Body of Evidence artifacts per security standards.

Qualifications

• 2 years of experience with vulnerability assessment and security testing.
• Experience detecting threats and vulnerabilities in systems and applications.
• Experience developing and maintaining security documentation.
• Ability to configure and conduct vulnerability scans and assess results.
• Experience supporting information assurance and risk management activities.
• Experience with RMF artifacts: SSP, POA&M, SCTM, RAR, CONOPS.
• Familiarity with incident response and handling methodologies.

Responsibilities

• Evaluate scan results, prepare reports, and briefing leadership on risk landscape.
• Collaborate with ISSEs and ISSOs to provide information assurance and risk management support.
• Develop and publish System Body of Evidence artifacts in line with security standards.
• Apply risk assessment and security testing practices and incident response knowledge.

Education

8140 Advanced certification (preferred)

CISM

CISA

CISSP

CySA+

CASP+

CFR

GPEN

GSNA

Tools

RMF framework

SSP

POA&M

SCTM

RAR

CONOPS

Job description

Accenture Federal Services is seeking a Vulnerability Assessment Analyst to safeguard critical systems by configuring and executing vulnerability scans, analyzing threat intelligence, and interpreting vulnerability announcements.

You will evaluate scan results, prepare reports, and briefing leadership on risk, collaborate with ISSEs/ISSOs on information assurance and risk management, and support documentation such as System Body of Evidence artifacts per security standards.