AWS Security Engineer (Incident Response)

Peraton; United States; Remote; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking an Incident Response Engineer to join their Security Team. This role focuses on leading incident response efforts, ensuring systems are secure and compliant, and collaborating with various teams to enhance security measures. The position is entirely telework based, requiring U.S. residency.

Qualifications

• 6 years of experience in Information Technology.
• Demonstrated experience with incident response and forensics.
• Ability to obtain/maintain a DHS EOD clearance.

Responsibilities

• Lead incident response and coordinate cybersecurity alerts.
• Develop and maintain Incident Response Plans.
• Conduct forensic analysis and post-incident investigations.

Skills

Incident response

Forensics

Root cause analysis

Cloud security

Communication

Education

High school diploma

Tools

Splunk

CloudTrail

GuardDuty

Job description

Responsibilities

Peraton is seeking an Incident Response Engineer to join our dynamic Security Team within the Department of Homeland Security (DHS) Datacenter Consolidation and Cloud Optimization (DCCO) program. This role supports our Security Team’s efforts by leading incident response and cybersecurity operational compliance. The Incident Response Engineer will ensure our systems remain secure, compliant, and resilient, actively contributing to our Governance, Risk, and Compliance (GRC) initiatives. This role is entirely telework based with core hours between 9 am- 3 pm (EST) Monday – Friday; applicant must reside and perform all work within the United States.

Day to Day Responsibilities

1. Incident Response and Management:
2. Lead and coordinate the response to cybersecurity alerts and incidents, ensuring rapid detection, analysis, containment, eradication, recovery, and post-incident activity recommendations.
3. Develop, implement, and maintain Incident Response Plans in line with organizational policies and NIST guidelines.
4. Conduct forensic analysis and post-incident investigations to identify root causes and recommend improvements.
5. Proactive Security Operations:
6. Analyze system vulnerabilities, propose compensating controls, and work with engineering teams to remediate issues.
7. Oversee the security posture of cloud environments (AWS) and recommend improvements.
8. Maintain and update security documentation such as System Security Plans, Incident Response Plans, and Standard Operating Procedures.
9. Develop and conduct security training for incident response and contingency planning.
10. Collaboration and Communication:
11. Work closely with the Cybersecurity Manager, ISSOs, and other security personnel to ensure the effective implementation of operational security measures.
12. Collaborate with engineering and IT teams to address security incidents and develop proactive strategies.
13. Communicate risks and remediation activities effectively to clients and senior management.
14. Tool and Process Development:
15. Create and maintain security tools, checklists, and templates to aid A&A and incident response processes, such as Splunk, CloudTrail, GuardDuty, Swim Lane, etc.
16. Leverage tools like Cyber Security Assessment and Management (CSAM) to manage risk and monitor compliance.

Qualifications

Basic Qualifications

• High school diploma and 6 years of experience
• U.S. citizenship and the ability to obtain/maintain a DHS EOD clearance (required prior to start)
• 5 years of relevant experience in Information Technology
• Demonstrated experience with incident response, forensics, and root cause analysis
• Knowledge of security countermeasures, NIST guidelines, and RMF
• Experience with cloud security, including FedRAMP and AWS
• Strong communication skills with a history of engaging stakeholders to deliver security solutions
• Ability to influence security practices across multiple teams and organizations

Some Desired Certifications

• One or more of the following: GCIH, CISSP, CISM, AWS Security Professional, CCSP, GISCP, or GSEC

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position based on experience and other factors.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.