Location: Washington, DC
Responsibilities
Assess security controls for accuracy and evidence
Review system documentation and accept / reject documents
Emphasis on coordination with System Owner, ISSE, ISSO to fix items that need rework
Emphasis on continuously monitoring systems across ISSM portfolio to focus on quality throughout SAA lifecycle
Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained
Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements
Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, risk appetite, and compliance requirements
Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables
Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards
Prepare risk management documentation for system authorization and executive decision-making
Direct ongoing monitoring and continuous assessment activities, collecting metrics to adjust security strategies and ensure sustained compliance
Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts
Foster a culture of security awareness, providing technical guidance and training to both team members and stakeholders
Track, report, and communicate status, risks, and improvement opportunities related to security engineering activities to leadership and stakeholders
Maintain up-to-date knowledge of RMF, NIST guidance, and industry best practices in support of continuous process improvement
#FederalCyberISaaS
Qualifications
Required Qualifications
Top Secret security clearance upon hire. The selected candidate must be eligible to obtain/maintain a TS/SCI clearance and successfully complete a polygraph examination if required by the customer. Must be a U.S. Citizen.
Minimum 8 years each of: (1) secure design/analysis/test; (2) methods/standards for safeguard implementation; (3) creating/updating security test plans
Must meet applicable DoW 8140.03 qualification requirements for Work Role 612 (Security Control Assessor), Advanced Proficiency level, through at least one of the following:
Certification
CCISO - Certified Chief Information Security Officer
CISA - Certified Information Systems Auditor
CISM - Certified Information Security Manager
CISSP - Certified Information Systems Security Professional
CISSP-ISSEP - Certified Information Systems Security Professional - Information Systems Security Engineering Professional
CySA+ - CompTIA Cybersecurity Analyst plus
GSLC - GIAC Security Leadership Certification
GSNA - GIAC Systems and Network Auditor; OR
Education: Master's degree or higher in Computer Science, Cybersecurity, Information Technology, Information Systems, Software Engineering, or a closely related field; OR
Certification: Qualifying DoD-approved training
Target Salary Range $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement
Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
- EEO
- EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
