In support of Accenture Federal Services (AFS) and a US Government AgencySecure systems in FedRAMP High JAB-accredited cloud and on premisesSecure platform components in Oracle Cloud Infrastructure (OCI)Identify and evaluate vulnerability and compliance risksRecommend risk mitigations and risk acceptanceHarden per DISA Security Technical Implementation Guides (STIG) and CIS benchmarks hundreds of Linux servers, hundreds of web servers, dozens of Windows servers, databasesMaintain standards-compliant baseline configurationsManage compliance scanning and reporting using Tenable Security Center and NessusCustomize monitoring and reporting using scripting and Ansible/Oracle Linux Automation ManagerCoordinate vulnerability remediationContribute to Configuration ManagementReview and monitor user and service account accessMaintain asset inventoriesAutomate manual processes reducing weeks of work to mere hoursScript in bash and PowerShellServe as security advisory member on Change Control BoardProduce artifacts, documentation, and interview responses for regular security assessmentsDocument system security controls according to NIST SP 800-53Document for Federal Information Security Modernization Act (FISMA)Document System Security and Privacy Plan (SSPP) mission-critical systemsCoordinate changes and document progress for Plans of Action & Milestones (POA&M)Participate in reporting and remediation for Binding Operational Directives (BOD)Documentation for Security Assessment & Authorization (SA&A) and Authorization to Operate (ATO)Create, mark, protect, and handle Controlled Unclassified Information (CUI) (SBU,FOUO)Assist in developing and updating secure application development requirementsUpdate disaster recovery (DR) plans with senior leadershipParticipate in incident response tabletop exercisesRecommend and implement improvements to continuous monitoring