Perform risk assessments and vulnerability assessments based on controls, security architecture reviews.
Document and maintain cybersecurity environment, standards, procedures, and system security plans.
Collaborate with IT, engineering, development, and business teams to embed security into system design, development, and operational processes (DevSecOps practices).
Evaluate emerging threats, technologies, and security solutions; recommend improvements to the security program.
Provide security guidance and awareness support to technical and nontechnical stakeholders.
Support continuous monitoring, metrics reporting, and security posture improvement initiatives.
Qualifications
Required
TS/SCI with relevant polygraph
BA/BS and 8+ years of experience; Masters and 6+ years of experience; an additional four years of experience may be considered in lieu of degree.
At least 3 years of hands-on experience in information systems security, cybersecurity engineering, or related roles in the customer environment as an ISSE.
Working knowledge of security frameworks and standards (NIST SP 80053, NIST Cybersecurity Framework, ISO 27001, CIS Controls, etc.).
Experience with security technologies such as firewalls, SIEM platforms, vulnerability management tools, endpoint protection, identity and access management (IAM), encryption, and network security controls.
Proficiency in assessing and securing operating systems (Windows, Linux), networks, cloud environments (AWS, Azure, or GCP), and applications.
Preferred Qualifications
Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field (or equivalent practical experience).
Relevant industry certifications such as CISSP, CISM, CompTIA Security+, CEH, GIAC certifications (GSEC, GCIA, GCIH, etc.), or cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, etc.).
Agile software development cycle including the ability to use Jira.
Hands-on experience with scripting or automation (Python, PowerShell, Bash) for security tooling and processes.
Prior experience supporting compliance audits or regulatory frameworks relevant to the organization.
Experience in incident response, forensic analysis, or security operations center (SOC) environments.
Knowledge of zero trust architecture principles and modern identity/security architectures.
Target Salary Range $146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement
Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
- EEO
- EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
