Author, complete and maintain the System Security Plan (SSP) within XACTA
Develop the Security Controls Traceability Matrices (SCTM), and the Security Test Plan (STP) procedures within Xacta.
Analyze existing security systems and make recommendations for changes or improvements
Prepare reports and action plans if a security breach does occur
Monitor the network and provide early warning of abnormalities or problems
Communicate the system status and keep users informed of downtime or changes to the system
Experience working with software developers and architects to understand security requirements
Experience guiding the application developers on security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements
Experience creating and managing the plan of action and milestones (POA&Ms), and working with project managers and engineers to develop schedules and engineering actions that mitigate open findings
Experience supporting the Continuous Monitoring of operational systems; experience monitoring and auditing operational systems for proper use
Log Review/Analysis using SIEM tools (Splunk, etc.)
Vulnerability Analysis and Review (ACAS, Prisma, SonarQube, JFrog X-Ray, GitLab Code Quality)
DISA STIGs and STIG Viewer experience
Qualifications
Required Qualifications
Bachelor's degree with 8+ years of relevant experience, Master's degree with 6+ years of relevant experience; or 4+ additional years of relevant experience in lieu of a degree
6+ years of experience with years supporting Assessment and Authorization (A&A) and information assurance processes and documentation using RMF
Active TS/SCI clearance with Polygraph
Hands-on experience with validating control implementations and test procedures
Experience with RMF and Xacta
Experience with DISA Security Technical Implementation Guide (STIG)
Knowledge of current security risks and protocols
Active DoD IAT Level I certification
Ability to work 100% onsite in a secure environment
Desired Qualifications
Experience working with AWS/Google cloud-hosted information systems or applications
Experience working with Containerized Systems or Applications
Experience working with Redhat or CentOS Linux operating systems
Experience working in a DevSecOps environment and tool chain
Target Salary Range $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement
Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
- EEO
- EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.