Accenture Federal Services is seeking a Signals Analyst to join our team in Annapolis Junction, MD, where your expertise in examining and interpreting transmissions will be pivotal in extracting meaningful intelligence. This role is ideal for individuals with strong analytical skills and a passion for uncovering patterns within complex data streams.

What you'll be doing: 

• Analyze signal characteristics and telemetry data to identify unique patterns and trends
• Distinguish between various types of transmissions, recognizing and interpreting patterns of life
• Detect anomalies within large volumes of incoming data and provide actionable intelligence insights
• Collaborate with colleagues and stakeholders to enhance intelligence operations and reporting
• Maintain rigorous attention to detail while performing daily tasks and producing analytical reports

What you'll need: 

• Bachelor’s degree plus 5 years of relevant experience, OR Master’s degree plus 4 years or relevant experience, OR PhD plus 2 years of relevant experience. Degrees must be in engineering, mathematics, computer science, physical science, or a related technical field
• Alternatively, candidates with relevant military degree programs/training such as 9141, IN2A, 451/461, 452, or MCSAP, MESAP, MOSAP will qualify with a High School Diploma/GED plus 7 years of experience, OR an Associate's degree plus 7 years of experience. Broader range of degrees considered for those who have completed relevant military training courses
• 3 years of experience in signals analysis 

Bonus points if you have: 

• Prior experience analyzing complex signal or telemetry data in an intelligence or defense setting
• Demonstrated ability to detect subtle anomalies and generate actionable reports from large datasets
• Familiarity with specialized military training or certifications relevant to signals analysis
• Exceptional problem-solving skills and adaptability to evolving technical challenges

Clearance: 

Must have an active TS/SCI with polygraph level clearance 

Accenture Federal Services is looking for an experienced Computer Scientist to join our team in Annapolis Junction, MD. As a cybersecurity professional at AFS, you’ll help design, develop, deliver, and manage solutions to our customer’s challenging computer science problems.

Responsibilities:

Management of solutions may occur in the forms of forensics and attack attribution, protection of critical networks, active systems warnings and indicators, active penetration into target systems, knowledge discovery of passive and active systems, or other computer science mission support.

What you’ll need:

• A.A. +7 years of relevant experience, or a B.S. +5 years of relevant experience, or a M.S. +3 years of relevant experience
• Degree must be in Computer Science, Computer Engineering, Mathematics, or related field with at least 1 programming and 4 upper level math class
• 5 years of experience with multiple of the following:
• Knowledge in operating systems, compiler theory, database theory, algorithm analysis, computer architecture, discrete math, programming language theory, and data structures.

Clearance:

• Active TS/SCI with Polygraph level clearance

Accenture Federal Services is seeking a reverse engineer to join our team and support our client in the San Antonio area, who will be responsible for conducting in-depth technical analysis of malicious binaries.

What you’ll do:

• Dissect and interpret the inner workings of suspicious files, using both static and dynamic analysis techniques to uncover their true functionality
• Identify indicators of compromise, document your findings, and provide actionable intelligence that supports the detection and mitigation of malware threats
• Contribute to strengthening the organization’s security posture by enabling rapid response to emerging threats
• Identify and neutralize sophisticated threats

What you’ll need:

• Bachelor’s degree + 11 years or relevant experience, OR Master’s degree + 9 years or relevant experience, OR PhD + 7 years or relevant experience, OR Associate’s degree + 13 years of relevant experience. Degree must be in Computer Science, Computer Engineering, Information Systems, or a similar technical degree
• CISSP, GIAC GREM, or CREA certification is required
• Experience with tools such as: IDA Pro, Ghidra, OllyDbg, and/or Wireshark
• Experience with sandbox environments, memory analysis utilities, and scripting languages like Python or PowerShell
• Background in malware reverse engineering, including unpacking obfuscated code and analyzing network behaviors

Bonus points if you have: 

• Ability to communicate technical findings clearly to both technical and non-technical stakeholders

Clearance:

• Must have an active TS/SCI with polygraph level clearance

#LI-Defense 

As a Cyber R&D Engineer, you will play a pivotal role in advancing the development of cutting-edge software solutions designed to exploit vulnerabilities in adversary technologies. Your expertise will be critical in integrating and testing tools acquired from external vendors, as well as maintaining software programs in collaboration with mission partners. This position demands a proactive approach to problem-solving, a commitment to staying ahead of emerging threats, and the ability to collaborate effectively with cross-functional teams to deliver innovative and secure solutions.

What you’ll do:

• Provide on-site support in research and development of software designed to exploit vulnerabilities in adversary technology
• Develop and optimize algorithms, author scripts, and create utility software
• Identify and analyze potential vulnerabilities in software, hardware, and firmware components
• Conduct threat modeling and risk assessments to identify potential attack vectors and vulnerabilities
• Evaluate the security posture of cyberspace systems, including network protocols, operating systems, and applications
• Research and analyze emerging trends and technologies in cyberspace, such as artificial intelligence, machine learning, and Internet of Things (IoT)
• Analyze and reverse engineer source code
• Perform software integration and testing of tools acquired via separate contracts or vendors
• Establish and maintain continuous integration/continuous development mechanisms in accordance with industry best practices
• Generate technical writing and documentation and perform lifecycle maintenance of software programs managed by MARFORCYBER and its mission partners
• Participate in solutions/scoping discussions, requirements refinement, complexity estimation, and potentially live operations to best meet supported unit/team needs

What you’ll need:

• 5 years of direct relevant experience in vulnerability research and analysis to include development of working proofs of concept (POCs)
• 5 years of experience in Windows and/or Linux operating systems
• Proficiency in one or more programming languages including but not limited to: C, C++, Python, Java/Javascript, Bash/Bourne/C Shell, Rust, Assembly
• Expertise with one or more tools: Gnu Debugger (GDB), Valgrind, Low Level Debugger (LLDB), Interactive Disassembler (IDA) Pro, Ghidra, SCons 

Bonus points if you have:

• Bachelor's degree in Computer Science or Engineering 
• Experience with Android, iOS, or Network Devices/RTOS operating systems
• Experience with cybersecurity tools including: Vulnerability scanners, Penetration testing frameworks, Security information and event management (SIEM) systems
• Ability to identify and mitigate risks in complex systems
• Understanding of secure coding practices and security vulnerabilities

Clearance: 

Must have an active TS/SCI with polygraph level clearance 

You Are:

The SIEM/SOAR Administrator Associate Director plays a critical role in managing, optimizing, and evaluating the Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) systems used in the Network Operations Center (NOC) and Security Operations Center (SOC). This position is responsible for the day-to-day administration of these tools, as well as conducting regular assessments of their effectiveness and efficiency. Additionally, this role involves evaluating existing security business processes and recommending improvements to enhance overall security operations. This SIEM/SOAR Administrator / Assessor role is crucial for ensuring the effective use of security tools and processes in the NOC and SOC environments.The position requires a blend of technical expertise, analytical skills, and the ability to drive continuous improvement in security operations.

The Work:

• Configure, maintain, and optimize SIEM and SOAR platforms
• Develop and implement use cases, correlation rules, and playbooks
• Troubleshoot and manage issues related to data collection, analysis, and reporting
• Assess the existing and to be state of the NOC and SOC operating environment
• Conduct gap analysis to identify areas for improvement in current toolset
• Integrate SIEM/SOAR systems with other security and network tools
• Ensure proper data flow and communication between different security systems
• Troubleshoot integration issues and work with vendors to resolve problems
• Create and maintain dashboards for real-time visibility into security events
• Review and assess existing security business processes
• Identify inefficiencies, redundancies, or gaps in current processes
• Recommend process improvements to enhance security operations
• Ensure SIEM/SOAR configurations meet compliance requirements
• Prepare documentation and evidence for security audits
• Assist in developing and maintaining policies and procedures related to SIEM/SOAR usage
• Provide technical support during security incidents
• Work closely with NOC, SOC, and other IT teams to align SIEM/SOAR capabilities with operational needs
• Participate in cross-functional projects related to security improvements

Here’s What You Need:

• Bachelors degree
• 5-10 years of experience in cybersecurity operations, security tools administration, or a related field.
• Hands-on experience with SIEM/SOAR platforms (e.g., Splunk, QRadar, LogRhythm, ArcSight, Sentinel, Cortex XSOAR, or others).
• Experience in configuring and optimizing use cases, correlation rules, and playbooks.
• Proficiency in troubleshooting and managing issues related to data collection, analysis, and reporting.
• Strong understanding of security and network protocols, data flow, and integration of security tools.
• Familiarity with scripting and automation languages (e.g., Python, PowerShell) for creating custom scripts and integrations.
• Knowledge of compliance requirements and best practices for SIEM/SOAR configurations.

Bonus Points If:

• Analytical Skills:
• Ability to conduct gap analysis to identify areas for improvement in the NOC and SOC operating environments.
• Strong analytical and problem-solving skills to assess and enhance security processes.
• Communication and Collaboration:
• Strong ability to document and prepare evidence for security audits.
• Excellent communication skills to work effectively with NOC, SOC, and cross-functional IT teams.
• Ability to translate technical findings into actionable recommendations for non-technical stakeholders.
• Additional Skills:
• Knowledge of compliance frameworks such as NIST, ISO 27001, or others.
• Familiarity with dashboard creation and real-time monitoring for security events.
• Proven track record of process improvement and driving efficiency in security operations.
• Relevant certifications such as CISSP, CISM, CEH, GIAC, or SIEM/SOAR-specific certifications (e.g., Splunk, QRadar, Palo Alto Cortex XSOAR certifications).

The Extras:

• US Citizenship Required
• The ability to obtain and maintain a Secret clearance

Job Description:

We are seeking a highly skilled and experienced Identity and Access Management (IAM) SME to join our team. The ideal candidate will have expertise in one or more IAM platforms such as Saviynt, CyberArk, SailPoint, or Okta, along with hands-on experience in authentication protocols like LDAP, SAML, and Azure Active Directory (Azure AD).

Qualifications:

• 5+ years of experience working with IAM platforms such as Saviynt, CyberArk, SailPoint, or Okta.
• Proficiency with authentication protocols and directory services, including LDAP, SAML, and Azure AD.
• Hands-on experience with role-based access control (RBAC) and privileged access management (PAM).
• Familiarity with cloud IAM solutions and integrations (e.g., Azure AD, AWS IAM).
• Must hold an Active Secret clearance

Preferred Skills:

• Programming or scripting knowledge (e.g., PowerShell, Python, Java).
• Knowledge of security monitoring tools like Microsoft Sentinel, Splunk, or Elastic.
• Certifications such as CISSP, CISM, or vendor-specific IAM certifications (e.g., Saviynt, CyberArk Defender, SailPoint Certified IdentityNow).

Eligibility Requirements:

US Citizen

#LI-Defense #LI-Onsite 

You Are:

The IAM Configurator/Administrator Associate Director plays a critical role in the implementation and ongoing support of the Network Operations Center (NOC) and Security Operations Center (SOC) by managing and optimizing identity and access management systems. This position is responsible for designing, implementing, and maintaining robust IAM solutions that ensure secure and efficient access to NOC and SOC tools, systems, and data. The IAM Configurator/Administrator works closely with various teams to align IAM practices with operational needs and security requirements. This IAM Configurator/Administrator role is crucial for ensuring secure and efficient access to NOC and SOC resources while maintaining a strong security posture. The position requires a blend of technical expertise in IAM technologies, understanding of security principles, and the ability to balance security requirements with operational needs in a dynamic environment.

The Work:

• Develop and maintain the IAM strategy for NOC and SOC environments
• Align IAM solutions with overall security policies and compliance requirements
• Implement and manage processes for user provisioning, modifications, and deprovisioning
• Develop automated workflows for identity lifecycle management
• Ensure timely and accurate updates to user access rights based on role changes
• Configure and manage role-based access control (RBAC) for NOC and SOC systems
• Implement least privilege and separation of duties principles
• Design and maintain access policies for various user groups and roles
• Troubleshoot authentication issues and optimize user experience - Administer and optimize directory services (e.g., Active Directory, LDAP)
• Manage directory synchronization between on-premises and cloud environments
• Implement and manage (Privilege Access Management) PAM solutions for NOC and SOC environments
• Configure secure access methods for privileged accounts
• Configure, maintain, and optimize IAM tools and platforms
• Perform regular updates and patches to IAM systems
• Troubleshoot IAM-related issues and implement solutions
• Collaborate with system administrators to resolve integration challenges
• Create and maintain documentation for IAM procedures and policies

Here’s What You Need:

• Bachelors degree Years of Experience: 8-12            
• 5-12 years of experience in cybersecurity operations, security tools administration, or a related field.
• Hands-on experience with SIEM/SOAR platforms (e.g., Splunk, QRadar, LogRhythm, ArcSight, Sentinel, Cortex XSOAR, or others).
• Experience in configuring and optimizing use cases, correlation rules, and playbooks.
• Proficiency in troubleshooting and managing issues related to data collection, analysis, and reporting.
• Strong understanding of security and network protocols, data flow, and integration of security tools.
• Familiarity with scripting and automation languages (e.g., Python, PowerShell) for creating custom scripts and integrations.
• Knowledge of compliance requirements and best practices for SIEM/SOAR configurations.

Bonus Points If:

• Analytical Skills:
• Ability to conduct gap analysis to identify areas for improvement in the NOC and SOC operating environments.
• Strong analytical and problem-solving skills to assess and enhance security processes.

• Communication and Collaboration:

• Strong ability to document and prepare evidence for security audits.
• Excellent communication skills to work effectively with NOC, SOC, and cross-functional IT teams.
• Ability to translate technical findings into actionable recommendations for non-technical stakeholders.

• Additional Skills:

• • Knowledge of compliance frameworks such as NIST, ISO 27001, or others.
  • Familiarity with dashboard creation and real-time monitoring for security events.
  • Proven track record of process improvement and driving efficiency in security operations.
  • Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or IAM-specific certifications (e.g., Certified Identity and Access Manager (CIAM), Okta, SailPoint, or Microsoft Certified: Identity and Access Administrator Associate)

The Extras:

• US Citizenship Required
• The ability obtain and maintain a Secret clearance