Senior Security Engineer

About this role

<div class="content-intro"><div> <div> </div> <div>At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. </div> <div> </div> <div>Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. </div> <div> </div> <div>Join us to drive positive, lasting change that moves missions and the government forward!</div> <div> </div> </div></div><p>We are seeking a highly skilled Security Engineer to join our team supporting Department of Defense<span data-ccp-props="{}"> </span>(DoD) programs. This role is responsible for architecting, engineering, and deploying advanced cybersecurity<span data-ccp-props="{}"> </span>solutions while ensuring compliance with Risk Management Framework (RMF), Joint Special<span data-ccp-props="{}"> </span>Access Program Implementation Guide (JSIG), and related regulatory standards. The ideal candidate<span data-ccp-props="{}"> </span>combines hands-on engineering expertise with deep knowledge of cloud technologies, system security,<span data-ccp-props="{}"> </span>vulnerability management, incident detection/response, and authorization-to-operate (ATO)<span data-ccp-props="{}"> </span>processes.<span data-ccp-props="{}"> </span></p> <p><strong>What you’ll do: </strong></p> <ul> <li><span data-contrast="auto"> Support, administer, and maintain cybersecurity tools and platforms, including:</span> <ul> <li><span data-contrast="auto"> Splunk Enterprise: clustered system administration, deployment, data onboarding, CIM </span>alignment, dashboards, alerts, etc.<span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Nessus/ACAS: Tenable Nessus Manager and Security Center - system administration, deployment, </span>scan management<span data-ccp-props="{}"> </span></li> <li>Evaluate-STIG and/or SCAP Compliance Checker</li> <li><span data-contrast="auto"> Microsoft Defender and/or Trellix(ePO)</span><span data-ccp-props="{}"> </span></li> </ul> </li> <li><span data-contrast="auto"> Integrate ancillary monitoring and assessment tools into SIEM</span></li> <li><span data-contrast="auto"> Enable “security-as-code” via automation with Ansible, Terraform, PowerShell, Bash, or Python</span></li> <li><span data-contrast="auto"> Contribute to incident detection and response, including developing detections, improving </span>telemetry, tuning alerts, and supporting investigation efforts<span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Select, architect, develop, and deploy solutions supporting vulnerability management, auditing, </span>logging, patch management, and risk remediation across enterprise and cloud-hosted environments<span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Engineer and implement security requirements for DoD cloud environments (AWS, Azure) in </span>accordance with RMF and JSIG<span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Perform advanced engineering to improve system security posture, including access control </span>(least privilege), configuration baselines, and endpoint security<span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Partner with ISSM/ISSO on RMF A&A activities, SSP updates, ConMon, control ownership/ </span>inheritance, and audit preparation<span data-ccp-props="{}"> </span></li> <li><span data-contrast="auto">Develop and maintain key technical documentation (SOPs, runbooks, architectural designs, etc.)</span></li> <li><span data-contrast="auto"> Mentor teams on secure design principles and provide recommendations for complex system </span>architectures<span data-ccp-props="{}"> </span></li> </ul> <p><strong>What you’ll need: </strong></p> <ul> <li>DoD IASAE Level II certification, such as CASP+ or CISSP (or ability to obtain within 3 months of hire)</li> <li>5 years of experience in a security engineering or similar role (e.g.: DevOps or security background, etc.) </li> <li>Hands-on experience with SIEM (e.g.: administration, data normalization, data pipelines, alerting, and/or correlation)</li> <li>Expertise in Windows and/or Linux (RHEL preferred) system…