A

Accenture

Advises businesses and runs their technology

IT Cyber Specialist

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeWashington, DC, USA$94k - $187.6kIn-person

About the Job

Requirements

  • U.S. citizenship and residence on U.S. soil are mandatory.
  • Intermediate-level vulnerability management and remediation tracking experience is required.
  • Intermediate-level cybersecurity fundamentals, including risk-based prioritization using CVSS, exploitability, and asset criticality, are required.
  • Intermediate-level cloud security knowledge across Azure, AWS, and/or GCP is required.
  • Basic-to-intermediate knowledge of CMMC, NIST SP 800-171, and CIS cybersecurity frameworks is required.
  • Intermediate-level incident and ticket management experience, including escalation workflows, is required.
  • Basic-to-intermediate knowledge of Agile methodology is required.
  • Written and verbal communication skills, ability to work independently on moderately complex tasks, and ability to collaborate with technical and non-technical stakeholders are required.

Responsibilities

  • Monitor and review new and recurring Wiz for Gov findings, including vulnerabilities, misconfigurations, exposed resources, toxic combinations, and compliance issues, across onboarded cloud accounts.
  • Validate findings, remove noise, and prioritize them by severity, exploitability, internet exposure, asset criticality, and business context to determine remediation priority.
  • Open, assign, and track tickets for actionable findings, ensuring each has a named system owner and target date.
  • Maintain an accurate vulnerability register and track findings through verified closure, including risk acceptances and approved exceptions.
  • Work with system owners and infrastructure, cloud, and application teams to explain findings, recommend remediation actions, and assess the feasibility and impact of proposed fixes.
  • Follow up on open items, escalate overdue or blocked remediation, and help remove impediments.
  • Drive server patch compliance through the Patch Management Incident Ticket process, including monthly and application-specific processes.
  • Drive the removal of end-of-life software in server and endpoint environments.
  • Re-scan and validate in Wiz for Gov that remediation is effective before closing items.
  • Respond to critical and high-severity findings, including P1 incident creation and escalation between the IT Cyber team and infrastructure teams, and coordinate resolution according to established processes.
  • Serve as a technical escalation point for day-to-day IT Cyber team activities involving cloud vulnerabilities.
  • Produce recurring metrics and dashboards covering open findings by severity, aging, service-level agreement compliance, remediation trends, and top risk owners for IT Cyber leadership and stakeholders.
  • Support evaluation of the security posture against CMMC, NIST SP 800-171, and CIS frameworks and requirements, and support audit and compliance evidence requests.
  • Support day-to-day Wiz for Gov operations, including user access and roles, saved views and reports, and notification and ticketing integrations, in coordination with the cloud engineering team.
  • Recommend tuning of policies, ignore rules, and workflows to reduce false positives and improve remediation speed, and identify opportunities to automate repetitive tracking and reporting tasks.
  • Document procedures, runbooks, and lessons learned to support operations and maintenance handoff.
  • Participate as a DevOps/Agile team member by communicating progress, escalating impediments, aligning with teammates on dependencies, and decomposing stories into tasks with effort estimates.
  • Support the Product Owner in refining backlog items, including acceptance criteria, descriptions, test scenarios, and estimates, and gather stakeholder feedback during the sprint.
  • Deliver fully tested and documented work products that meet the Definition of Done.

Desired Qualifications

  • Cloud Security Posture Management (CSPM/CNAPP) experience in Azure, AWS, and/or GCP is preferred.
  • Experience with Wiz or the Wiz for Gov platform is preferred.
  • Patch management and end-of-life software remediation experience is preferred.
  • Scripting or automation experience for reporting and ticketing workflows, such as Python, PowerShell, or APIs, is preferred.
  • A security certification such as Security+, CySA+, CISSP, or a cloud security certification is preferred.

About the Company

Accenture

Advises businesses and runs their technology

Accenture advises large businesses and public agencies on strategy, builds their technology systems and runs ongoing operations. Its teams connect business planning with implementation, covering areas such as cloud migration, cybersecurity and customer experience. Consultants work with clients to redesign processes, while engineers integrate software from technology partners and maintain the resulting systems for multinational organizations. Clients pay for project work or continuing services, including application support and business processes such as finance and customer service. Accenture was founded in 1989 and has its headquarters in Dublin, Ireland.

Company size
10,001+
Company stage
IPO
Headquarters
Dublin, Ireland
Founded
1989

Recently Posted Jobs

Explore more opportunities at Accenture

See more jobs