Cloud Security Monitoring and Reporting Engineer; Journeyman

Cloud Security Monitoring and Reporting Engineer (Journeyman)

Peraton is seeking a Cloud Security Monitoring and Reporting Engineer (Journeyman) to support the MODES III program supporting Military Community and Family Policy (MC & FP). In this role, the selected candidate will support monitoring and analysis of cloud security events, logs, and alerts across cloud-hosted environments to identify potential security issues and trends. This position is remote and requires an active Secret clearance.

• Supports monitoring and analysis of cloud security events, logs, and alerts across cloud-hosted environments to identify potential security issues and trends.
• Assists with configuration, operation, and maintenance of security monitoring and reporting tools, ensuring accurate collection and correlation of security data.
• Supports development and maintenance of security dashboards and recurring reports that communicate system security posture, trends, and findings to program and Government stakeholders.
• Assists with validation and reconciliation of security data from multiple sources to ensure accuracy, completeness, and consistency of monitoring outputs.
• Performs vulnerability scanning and assessment using tools such as ACAS/Nessus, analyzing scan results and coordinating remediation activities with system administrators and development teams.
• Supports incident response and escalation procedures, including initial triage of security events, documentation of findings, and coordination with the Security Operations Center (SOC) and Government stakeholders.
• Configures and maintains SIEM tools and log aggregation platforms (e.g., Cloud Watch, Splunk, ELK Stack) to ensure comprehensive security event collection, correlation, and alerting across cloud environments.
• Familiar with:
  Splunk, AWS Guard Duty, Cloud Watch Insights, Cloud Trail, AWS Security Hub, AWS Config, AWS Inspector, ACAS/Tenable, STIG/SCAP automation, eMASS/RMF tooling, Tanium/Steel Cloud, SIEM playbooks, SOAR orchestration, Prometheus/Grafana, ELK/Open Search, Kinesis/Glue/Lake Formation, Python/SQL for analytics, Splunk Enterprise Security, dashboarding (Quick Sight/Tableau)

• Active Secret clearance required.
• Experience /
  
  Education:
  
  5 years relevant experience with BS/BA degree or 3 years with MS/MS or 1 year with PhD or 9 years w/o a degree or 7 years with AS/AA.
• Certifications:
  
  Mandatory:
  Must possess one of the following foundational certifications at the time of hire:
  CompTIA CySA+, CompTIA Pen Test+, EC-Council Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA), or an equivalent intermediate-level certification as defined in the DoD 8140 Qualification.

• Eligible for Top Secret/SCI clearance.
• AWS certifications (e.g., AWS Solutions Architect, AWS Security Specialty) or equivalent cloud certifications.
• Experience supporting large-scale government IT modernization programs.

Work location:
Remote with ability to travel to the NCR when required.

$66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO:
Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.