Federal - SOC Security Engineering SME
Greenbelt, MD

Job Description

Organization: Accenture Federal Services

Location: Greenbelt, MD

Accenture Federal Services, a wholly owned subsidiary of Accenture LLP, is a U.S. company with offices in Arlington, Virginia. Accenture's federal business has served every cabinet-level department and 30 of the largest federal organizations. Accenture Federal Services transforms bold ideas into breakthrough outcomes for clients at defense, intelligence, public safety, civilian and military health organizations.

We believe that great outcomes are everything. It's what drives us to turn bold ideas into breakthrough solutions. By combining digital technologies with what works across the world's leading businesses, we use agile approaches to help clients solve their toughest problems fast-the first time. So you can deliver what matters most.

Count on us to help you embrace new ways of working, building for change and put customers at the core. A wholly owned subsidiary of Accenture, we bring over 30 years of experience serving the federal government, including every cabinet-level department. Our 7,200 dedicated colleagues and change makers work with our clients at the heart of the nation's priorities in defense, intel, public safety, health and civilian to help you make a difference for the people you employ, serve and protect.

The Senior Security Engineer will work seamlessly with the Security Engineering Leads to conduct security engineering activities, to include:

* Design, implement and monitor security measures for the protection of web sites, networks and information privacy
* Identify, define, implement system security requirements for external and internal facing web applications
* Work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture for the communications aspects of applications in both a private on premises data centers and public cloud offerings.
* Conduct assessments using COTS and other tools to ensure coding practices are followed and effective as well as identify risks.
* Ensure the secure design, architecture, installation, configuration, hardening, and remediation for software applications to protect organizations' sensitive information for On-Premise and Cloud environments.
* Validate that system and application design and architecture meet best practice Security standards
* Develop strategies to respond to and recover from a security breach. Information Security Engineers are also responsible for educating the workforce on information security through training and building awareness.
* Follows documented application technical approaches to assess threats and residual risks, along with specifying the implementations required for customer
* Utilizes the organization tasking tracking database, framework and application to manage security operations and make the necessary reports based on due dates, assignments, coordination requirements, percent of completion, completion and archival. Devises solutions to operational problems within the capacity and operational limitations of installed equipment.
* Analyzes change requests for security impacts to applications and provides recommendations to leadership.
* Monitors and tracks application related security defects and resolutions; assigns tasks to the appropriate working group or individual. Coordinates and facilitates working groups and integrated process teams to achieve solution.
* Assists in establishing and implementing a Continuous Diagnostics and Mitigation (CDM) capability within application environments to ensure integrated security controls
* Focuses on application interface management as it relates to security impacts and networking needs between Cloud and on premises Data Centers, and Cloud and Internet (VPN) users
* Works within a Sprint to ensure engineering features and enhancements include security requirements and meet Federal directives. Acts as a bridge between project teams or developers and security personnel, by being able to understand and interface in all areas. Identifies specific areas of concern related to securing sensitive data in a both a cloud and data center environment.
* Provides thought leadership to provide guidance and best practices
* Generates documentation as required.