Key responsibilities:
- Identify, assess, and prioritize vulnerabilities and risks across applications, networks, endpoints, cloud environments, and enterprise systems
- Collaborate with ISSOs and Controls Assessors to capture RMF artifacts and validate security control effectiveness
- Coordinate with Engineers to develop and design secure systems that are positioned to quickly and easily achieve FISMA accreditation
- Review, advise, and refine security Control Statements to ensure systems are hardened and accurately represented in assessment documentation
- Drive compliance with federal regulations and policies, such as NIST special publications, OMB publications, and Binding Operational Directives (BODs)
- Drive engineering best practices and secure practices, to include those processes establishing configuration, hardening, and risk reduction
- Identify risks, assess those risks, and provide remediation guidance
- Communicate risks clearly to stakeholders and recommend effective mitigation strategies
- Contribute to the continuous improvement of security processes and controls
Here’s what you need:
- 4–6 years of experience performing security engineering or secure engineering
- Strong understanding of the FISMA Risk Management Framework (RMF)
- Experience hardening applications and operating systems
- Understanding of OS‑level vulnerabilities and hardening practices
- Understanding of core network protocols and components (TCP/IP, DNS, firewalls, routers, switches)
- Experience configuring and working with Identity Providers (IdP)
- Experience with patch management tools and processes
- Ability to identify, assess, and mitigate risks
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
Bonus:
- Strong experience working with Cloud Service Providers (AWS, Azure, GCP) and cloud‑native policies
Eligibility requirements:
- U.S. Citizenship required
- Eligible to obtain a Public Trust security clearance
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
Skills Required
- 4-6 years of experience in vulnerability management or a related information security role
- Advanced knowledge of vulnerability management tools such as Tenable Nessus, Qualys, Rapid7, or OpenVAS
- Strong understanding of vulnerability scanning, assessment, and risk prioritization
- Familiarity with CVSS, NIST 800-53, and OWASP Top 10
- Understanding of OS-level vulnerabilities across Windows, Linux, and macOS
- Knowledge of core network protocols and components, including TCP/IP, DNS, firewalls, routers, and switches
- Experience with AWS, Azure, or GCP and cloud-native policies
- Experience configuring and working with Identity Providers
- Experience with patch management tools and processes
- Basic understanding of FISMA and SOX compliance requirements
- Familiarity with NIST CSF, ISO 27001, and CIS Controls
- Ability to assess vulnerabilities, identify risks, and support incident response
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience
- Advanced skills in vulnerability exploitation and proof-of-concept development
- Familiarity with Metasploit or other exploit frameworks
- Experience with cloud security tools such as AWS Inspector, Azure Security Center, or GCP Security Command Center
- Experience identifying and mitigating high-impact vulnerabilities in complex environments
- Experience with SCAP or CIS-CAT configuration assessment tools
- Knowledge of threat intelligence processes and correlating vulnerabilities with real-world threats
- Understanding of threat modeling and attack surface analysis
- Experience with Splunk or QRadar and integrating SIEM tools with vulnerability processes
- Ability to analyze logs, alerts, and correlation events
- GCVA, OSCP, CISSP, or CISM certification
- U.S. citizenship
- Eligibility to obtain a Public Trust security clearance
Similar Jobs
What We Do
Accenture Federal Services is a leading US federal services company and subsidiary of Accenture LLP. It empowers US federal agencies to reinvent their operations and deliver missions faster using technology and AI. By leveraging mission expertise and commercial innovation, the company provides solutions in cloud, data, and cybersecurity to help the government make the nation stronger, safer, and more resilient.







