ISSE

Peraton Overview Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace.

The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit  to learn how we’re keeping people around the world safe and secure.

Responsibilities Peraton’s Space Sector is seeking a seasoned Information Systems Security Engineer (ISSE) to join our diverse Information Assurance team supporting the Intelligence Community at our Herndon, VA office. The candidate will be expected to:

Design and implement safety measures and controls. Monitor network activity to identify vulnerable points. Address privacy breaches and malware threats.

Support the Assessment and Authorization (A&A) processes and Information Assurance documentation for multiple analytic and mission systems across all CLINsGenerate and maintain the complete security Body of Evidence (BoE) while leading the A&A activities according to the Risk Management Framework (RMF) processes (ICD 503, CNSSI-1253, NIST 800-37, NIST 800-53, etc.) for all multiple information systems

Author, complete and maintain the System Security Plan (SSP) within XACTADevelop the Security Controls Traceability Matrices (SCTM), and the Security Test Plan (STP) procedures within Xacta.

Analyze existing security systems and make recommendations for changes or improvements

Prepare reports and action plans if a security breach does occur

Monitor the network and provide early warning of abnormalities or problems

Communicate the system status and keep users informed of downtime or changes to the system

Experience working with software developers and architects to understand security requirements

Experience guiding the application developers on security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements

Experience creating and managing the plan of action and milestones (POA&Ms), and working with project managers and engineers to develop schedules and engineering actions that mitigate open findings

Experience supporting the Continuous Monitoring of operational systems; experience monitoring and auditing operational systems for proper useLog Review/Analysis using SIEM tools (Splunk, etc.)Vulnerability Analysis and Review (ACAS, Prisma, Sonar Qube, JFrog X-Ray, Git Lab Code Quality)
DISA STIGs and STIG Viewer experience

Qualifications

Required Qualifications:

Bachelor's degree with 8+ years of relevant experience, Master's degree with 6+ years of relevant experience; or 4+ additional years of relevant experience in lieu of a degree6+ years of experience with years supporting Assessment and Authorization (A&A) and information assurance processes and documentation using RMFActive TS/SCI clearance with Polygraph Hands-on experience with validating control implementations and test procedures

Experience with RMF and Xacta

Experience with DISA Security Technical Implementation Guide (STIG)
Knowledge of current security risks and protocols

Active DoD IAT Level I certification

Ability to work 100% onsite in a secure environment

Desired

Qualifications:

Experience working with AWS/Google cloud-hosted information systems or applications

Experience…