Information Systems Security Engineer

Accenture Federal Services is seeking an Information Systems Security Engineer (ISSE) to join our team in the Arlington, VA area to support cybersecurity authorization and assessment activities for classified information systems in accordance with the Risk Management Framework (RMF). This role works as part of a highly specialized team reviewing and validating RMF authorization body of evidence, performing technical compliance analysis, inspecting security control implementations, and supporting incident response activities. The ISSE ensures systems comply with federal IA directives, protect data across all classification levels (including SCI), and meet required security design, control, and documentation standards. The ISSE also contributes to key RMF artifacts such as SSPs, SCTMs, POA&Ms, RARs, and continuous monitoring documentation.

What you’ll do:

• Review and assess RMF authorization packages and body of evidence, including:
• System Security Plan (SSP)
• Security Control Traceability Matrix (SCTM)
• Continuous Monitoring Plan
• Incident Response Plan
• Access Control Plan
• Security Assessment Plan, and other artifacts
• Review new and existing systems for technical compliance with IA directives and ensure protection of classified data (up to SCI)
• Advise on in‑depth security design reviews, threat assessments, and risk assessments
• Provide inputs to technical artifacts including POA&Ms, SCTMs, and Risk Assessment Reports (RARs)
• Conduct site visits and security assessments to inspect security control implementations
• Support Incident Response Team (IRT) activities and assist with incident analysis and reporting
• Apply RMF knowledge to ensure security controls meet NIST 800‑53 requirements and RMF process expectations
• Coordinate with government stakeholders, system owners, and engineering teams to ensure RMF compliance
• Communicate technical concepts clearly to both technical and semi‑technical audiences, including government personnel
• Work within a matrixed environment, supporting multiple efforts and priorities
• Perform research and remain current with evolving security threats, technologies, and compliance requirements

What you’ll need:

• DoD 8570 IAT Level II or higher (ex: Security+, CISSP, CASP, etc.)
• 4 years of experience implementing NIST 800‑53 Rev. 4 and supporting full RMF lifecycle activities
• 4 years’ experience with Windows and/or Linux operating environments
• 4 years’ experience with virtualization or cloud environments (AWS preferred) 
• 2 years’ experience working with information security and IA practices/principles
• Experience with tools such as:
• MS Active Directory
• Splunk
• ACAS/Nessus
• Windows/Linux OS
• AWS Security tools

Bonus Points if you have:

• ACAS/Nessus scanning experience
• Experience configuring and operating SIEM/Splunk tools; creating dashboards and reports
• Experience with incident handling procedures
• Additional security certifications (Cloud, SIEM, Forensics, Linux, Windows, etc.)