Senior Cybersecurity Engineer
Source: remoteok
At Accenture Federal Services, we are dedicated to helping the US federal government strengthen the nation, enhance safety, and improve lives. Our team of 13,000+ professionals is united by a shared purpose: to harness the limitless potential of technology and ingenuity for our clients across defense, national security, public safety, civilian, and military health organizations.
Join Accenture Federal Services, a technology company and part of global Accenture, to contribute to meaningful work within a collaborative and supportive community. Here, you'll feel a sense of belonging and be empowered to grow, learn, and thrive through hands-on experience, certifications, industry training, and more. Join us in driving positive, lasting change that advances missions and the government!
About the Role
The Senior Cyber Security Engineer will design, develop, and maintain reusable frameworks, libraries, APIs, and reference implementations for zero trust authentication and authorization.
Responsibilities
- Create developer guides, documentation, and best practices to enable smooth integration with security services.
- Implement and support fine-grained authorization patterns (entitlements, row-level security, ABAC).
- Collaborate with architects and engineers to ensure security services meet performance, usability, and compliance requirements.
- Conduct code reviews and provide guidance to development teams on secure coding and integration practices.
- Research emerging zero trust and identity/access management technologies to recommend improvements.
Requirements
- 4 years of experience as a Cyber Security Engineer with an emphasis on automation and platform engineering, providing subject matter expertise to the team and the customer.
- 3 years of experience with designing and building implementations of required security controls; and implementing continuous monitoring and auditing of solutions for compliance with security controls.
- Strong experience in implementing security controls from government regulatory frameworks and security standards (e.g., NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
- Experience with researching, designing, testing, evaluating, and implementing technologies such as Infrastructure as Code (IaC), containerization, K8, and CI/CD Automation.
- Experience with Source Code repositories and CI/CD pipeline solutions such as Bitbucket and GitHub.
- Experience with container orchestration tools (OpenShift preferred).
- Demonstrated and repeat experience implementing controls for cloud, container, and/or DevSecOps services and solutions from IL5 to IL6+ on NIPR, SIPR, and JWICS.
- Expert-level skills in specifying and implementing log collection into tools such as Splunk, and performing querying and analysis of aggregated logs to identify security-relevant anomalies or risks.
Bonus Points
- Expert proficiency in incident response, security incident handling, and forensic analysis techniques.
- Expertise with security tools such as Fortify, Acunetix, and Prisma Cloud.
- Experience performing periodic (Daily, Weekly, Monthly) security checks to support continuous monitoring aligned with the NIST Risk Management Framework.
- Experience applying Security Technical Implementation Guide (STIG) requirements to harden information systems (Linux Preferred).
- Effective communication skills, with the ability to convey complex technical information clearly.