Senior Information Assurance Engineer

Location: Denver, CO (Hybrid), San Antonio, TX (Hybrid), Brooklyn, NY (Hybrid), or Remote (US Based)

About the Role

As the Senior Information Assurance Engineer, you will focus on the technical execution of our cybersecurity compliance and resilience efforts.  You are an independent, self-sufficient expert who drives the Risk Management Framework (RMF) process forward without needing constant oversight.  You will work closely with the team and the RMF Lead to align on team priorities, technical guidance, and the strategic roadmap for sustaining our Authority to Operate (ATO).

Work Model: We prioritize candidates in the Denver, CO, San Antonio, TX, and Brooklyn, NY area, but are open to remote talent.

• Locals: 2 days/week onsite.
• Remote: Quarterly travel for team meetings.

What Success Looks Like:

• 30 Days: Review security architecture and identify critical paths for the upcoming expansions.  Familiarize yourself with the hybrid cloud/on-prem infrastructure, documentation, current workflows and begin analyzing system logs to understand the current baseline.
• 60 Days: Begin gathering and analyzing artifacts for compliance activities such as vulnerability and compliance scans.  Review and update STIG Checklists to ensure technical alignment.
• 90 Days: Assume responsibility for recurring continuous monitoring activities and the submission of related artifacts.  Proactively initiate and support A&A activities in coordination with the RMF Lead.  Begin to review and update system plans and technical documentation. 

What You’ll Do

• Execute and automate technical activities to obtain and maintain multiple Authorities to Operate (ATOs) for systems securing critical infrastructure.
• Define and scale monitoring by refining alerting thresholds and enhancing SIEM dashboards to improve real-time detection capabilities.
• Manage and remediate vulnerabilities by maintaining POA&Ms and implementing automated security patches across hybrid environments.
• Collaborate with Engineering teams to gather system artifacts and ensure security controls are integrated into the development lifecycle.
• Act as a technical liaison during engagements with the AO/AODR, providing risk mitigation guidance and technical context to support the RMF Lead.
• Provide technical expertise to evolve the security roadmap in alignment with customer requirements, company priorities, and new DoD standards.

What You Bring

Required Qualifications:

• Experience: 8+ years in DoD Cybersecurity/Information Assurance roles, with a track record of executing and authoring complex RMF packages to successful ATOs.  Ability to operate autonomously in ambiguous environments while maintaining strict alignment with team priorities.
• Technical Leadership: Expert-level understanding of eMASS and its workflows, NIST 800-53, and the ability to interpret DISA STIGs into technical requirements for developers. Hands-on experience with vulnerability scanning tools (e.g., ACAS/Nessus) and SIEM environments.
• Domain Expertise: Strong understanding of DoD Zero Trust requirements and hands-on experience maintaining security standards within automated CI/CD workflows and DevSecOps environments.
• Clearance: Must be a U.S. Citizen with an active (or ability to obtain) Secret Clearance.
• Compliance: Must be able to obtain a DoD NIPR account/CAC and possess or achieve DoD 8140/8570 IAT Level III (e.g., CISSP, CASP+, or CISM) within 6 months of hire.

Preferred Qualifications:

• Based in the Denver, CO, San Antonio, TX, or Brooklyn, NY area (Hybrid/Remote availability).
• Experience in a "Senior" IA or ISSO capacity for a non-traditional defense contractor or high-growth technology startup.
• Advanced proficiency in scripting (Python, Bash, or PowerShell) or using automation tools to streamline RMF activities.
• Experience with cloud-native security services (e.g., AWS Security Hub, GuardDuty, or Azure Monitor) within GovCloud or IL-4/5 environments.

Our Culture

At Simplesense, we value high-trust autonomy. We look for people who can navigate ambiguity and are driven by the mission.

• Safety & Innovation: You embed security and reliability practices into daily work to drive continuous improvement and mitigate risk.
• People & Communication: You invite vigorous debate and offer "kindly blunt" feedback, always maintaining empathy and assuming noble intent.
• Integrity & Ethics: You build trust by honoring commitments, acting ethically, and resolving conflict through direct, honest communication.
• Strategic Problem Solving: You focus on high-priority issues to create documented, and scalable solutions—avoiding shortcuts.
• Agility: You move quickly to fix small problems, learn from the past, and pivot transparently when the mission requires it.

Compensation and Benefits

Pay Range: $125,000- $155,000 per year. Compensation is determined based on experience, skill level, and location. We review ranges regularly to ensure market competitiveness.

The Detection Engineer will work on the Cyber Incident Response Team (CIRT) within the Information Security organization.

Responsibilities include:

• Design, engineer, and implement security detection initiatives under the cybersecurity team lead.
• Develop new detection logic for SIEM (Microsoft Sentinel) and network security platforms (Cisco FirePower, IDS/IPS), incorporating AI-driven tooling where applicable.
• Write and optimize KQL queries for Sentinel to improve detection fidelity and reduce false positives.
• Tune detection sets to raise security-relevant events for triage and response teams.
• Maintain version control of detection logic using Git and GitHub workflows for collaborative development and auditability.
• Bridge the gap between network engineering and cybersecurity teams to advocate for secure network designs and maximize security device capabilities.
• Conduct technical briefings to enhance team awareness of network architecture and detection strategies.
• Collaborate with operations and management to recommend improvements to security posture and ensure compliance with industry and federal standards (e.g., NIST, CISA).

What You Need:

• U.S. Citizenship required
• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
• 6 + years experience in information security or equivalent combination of education and work experience
• 2+ years experience performing event and log analysis across enterprise security tools (AV, IDS/IPS, Firewalls, Active Directory, Web Proxies, DLP, SIEM)
• Hands-on experience with:
  • Microsoft Sentinel & KQL (minimum 1 year)
  • Cisco FirePower and IDS/IPS configuration (minimum 1 year)
  • SIEM platforms (Sentinel preferred)
  • Detection engineering: designing and tuning signatures for IoCs and IoAs
  • Packet and malware analysis using tools like Wireshark
  • Git and GitHub for detection code version control and collaborative workflows
  • Scripting and parsing (regex, PowerShell, Python, grep, sed, awk)
  • TCP/IP, application layer protocols, and Windows/Linux internals
  • MITRE ATT&CK framework for detection mapping

Bonus If You Have:

• Threat hunting and automation experience
• Familiarity with cloud security monitoring (Azure, AWS)
• Certifications such as GIAC GCIA, GCED, or Microsoft Security Operations Analyst Associate

Accenture Federal Services is seeking a reverse engineer to join our team and support our client in the San Antonio area, who will be responsible for conducting in-depth technical analysis of malicious binaries.

What you’ll do:

• Dissect and interpret the inner workings of suspicious files, using both static and dynamic analysis techniques to uncover their true functionality
• Identify indicators of compromise, document your findings, and provide actionable intelligence that supports the detection and mitigation of malware threats
• Contribute to strengthening the organization’s security posture by enabling rapid response to emerging threats
• Identify and neutralize sophisticated threats

What you’ll need:

• Bachelor’s degree + 11 years or relevant experience, OR Master’s degree + 9 years or relevant experience, OR PhD + 7 years or relevant experience, OR Associate’s degree + 13 years of relevant experience. Degree must be in Computer Science, Computer Engineering, Information Systems, or a similar technical degree
• CISSP, GIAC GREM, or CREA certification is required
• Experience with tools such as: IDA Pro, Ghidra, OllyDbg, and/or Wireshark
• Experience with sandbox environments, memory analysis utilities, and scripting languages like Python or PowerShell
• Background in malware reverse engineering, including unpacking obfuscated code and analyzing network behaviors

Bonus points if you have: 

• Ability to communicate technical findings clearly to both technical and non-technical stakeholders

Clearance:

• Must have an active TS/SCI with polygraph level clearance

#LI-Defense