Information Assurance Security Specialist
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face.
About the Role
Peraton has an exciting opportunity for a cleared Information Assurance Specialist to join our dynamic multi-disciplinary team, developing a next-generation satellite terminal on a mission-critical Space and Intelligence Program.
Responsibilities
- Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision.
- Develops techniques and procedures for conducting IS and cyber security risk assessments and compliance audits, evaluation and testing of hardware, firmware, and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, attacks, or leaks.
- Performs security reviews, identifies gaps in security architecture, and develops a security risk management plan.
- Plans and conducts security authorization reviews and assurance case development for initial installation of systems and networks.
- Reviews requests for security-relevant changes to mission infrastructures, ensuring risk is adequately mitigated.
- Performs patch management and vulnerability remediation for IT assets, ensuring compliance with security benchmarks (DISA STIGs, CIS Benchmarks, SCAP).
- Ensures that IS and cyber security plans, controls, processes, standards, policies, and procedures are aligned with IS standards and overall IS and cyber security.
- Supports the implementation of Zero Trust Architecture (ZTA) and Identity & Access Management (IAM) controls.
- Conducts security reviews for third-party applications and vendors to mitigate supply chain risks.
- Communicates frequently with customer IA team regarding any asset changes, determines impact of any upcoming policy changes, and flows down information about other evolving IA requirements.
- Assists in securing cloud-based environments (AWS, Azure, Google Cloud) through security controls like CASB, CSPM, and cloud encryption.
- Works with engineering and operations teams to review and update procedures and SOPs to produce positive cybersecurity outcomes.
Requirements
- Bachelor's degree and five years of experience.
- Experience with NIST 800-53 security controls and Risk Management Framework (RMF) process with a U.S. Government agency.
- One year of experience with vulnerability management for networks, operating systems, and software.
- Familiarity with cybersecurity tools such as Splunk, Nessus Security Center, etc.
- Capable of designing user-focused dashboards and reports.
- Current Security+ or similar DoD 8570 IAT certification.
- Must possess an active, current Top Secret/Sensitive Compartmented Information (TS/SCI) and the ability to pass a polygraph.
Qualifications
- Splunk reports and dashboards (desired).
Pay
Target salary range: $104,000 - $166,000. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits
Peraton offers eligible employees a variety of benefits including:
- Medical, dental, and vision insurance.
- Life insurance and health savings account.
- Short/long-term disability.
- Employee Assistance Program (EAP).
- Parental leave.
- 401(k) retirement plan.
- Paid time off (PTO) for vacation.
- Company-paid holidays.