Blue Team Infrastructure SME

Peraton; Arlington (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Peraton is seeking a Blue Team Senior Engineer / Infrastructure SME to join the DoS Diplomatic Security Cyber Mission in Rosslyn, VA. You will lead cyber defense activities, coordinate remediation, and implement zero-trust concepts across on-premises and cloud environments.

Ideal candidates hold CISSP family certifications, Splunk/SOAR expertise, and experience with Tanium and Defender for Endpoint. The role requires U.S.

Qualifications

• Bachelor's degree and 5 years of experience; 3 years with a Master's; no years with a PhD.
• Possess and maintain professional certifications listed in the requirements.
• Proficient with endpoint detection and response tools (Tanium, Defender for Endpoint).
• Proficient with SIEM and SOAR platforms (Splunk, ServiceNow SOAR).
• Understanding of cloud security portals (Azure Security Center, AWS Security Hub).
• Strong stakeholder communication across media to achieve mission objectives.
• U.S. citizenship and active/ability to obtain Top Secret clearance.

Responsibilities

• Assist with enterprise efforts to assess systems and coordinate remediation.
• Leverage SIEM and SOAR to track exposures and drive remediation.
• Ensure security of cloud systems across IaaS, PaaS, and SaaS.
• Communicate cybersecurity recommendations to system owners and verify remediation.
• Develop and test tools for applicability of findings on customer networks.
• Apply zero-trust architecture to on-premises, cloud IaaS/PaaS/SaaS.
• Build relationships within team, office, and external stakeholders.

Skills

CISSP-ISSAP

CISSP-ISSEP

CISSP

Security+ CE

CySA+

SIEM (Splunk)

Endpoint Defense (Tanium)

Microsoft Defender for Endpoint

ServiceNow SOAR

Zero Trust

Communication

Education

Bachelor's degree

Master's degree

Tools

Splunk

Tanium

Microsoft Defender for Endpoint

Azure Security Center

AWS Security Hub

ServiceNow SOAR

Job description

Required:

• Bachelor's a degree and 5 years of experience; 3 Years with Masters; 0 Years with PhD. An additional four (4) additional years of experience may be substituted in lieu of the degree requirement.
• Possess and maintain, or be able to obtain before start date, the following professional certification:
  • CISSP-ISSAP
  • CISSP-ISSEP
  • CISSP
  • Security+ CE
  • CySA+
  • PPD
  • Agile IC
  • SNOW App Dev
  • Proficient in SIEM platform usage, such as Splunk.
• Proficient in the use of Endpoint Detection & Response tools, such as Tanium and Microsoft Defender for Endpoint.
• Proficient in the use of the ServiceNow SOAR platform.
• Understanding with cloud native portals such as Azure Security Center or AWS Security Hub to identify misconfigurations and security issues.
• Competent in communicating across all media to build relationships with stakeholders and achieve mission objectives.
• U.S. citizenship required
• Active Secret security clearance
• Ability to obtain a Top Secret security clearance

Preferred Qualifications:

• CCNA or NET+ certification.
• Knowledge of and experience with security subsystems (e.g. firewalls, VPN servers, IDS/IPS, etc.) is preferred.
• Working knowledge of network technologies.
• Working knowledge of Kusto Query Language (KQL).
• Knowledge of Network Device configurations.
• Familiarity with the MITRE ATT&CK Framework
• The ability to solve network-related problems by using diagnostic techniques and protocols.
• Familiarity with backbone and Wide Area networking (WAN) components, wiring infrastructures, VPNs, Layer 2 and 3 networking protocols, multicast, firewalls, DHCP, DNS, IP address management and network monitoring software is preferred.
• Familiarity with Zero-Trust Architecture (ZTA) framework.

Peraton is currently seeking to hire a Blue Team Senior Engineer / Infrastructure Subject Matter Expert to become part of Peraton’s Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes.

Location: Rosslyn, VA

What You'll Do:

• Assist with enterprise efforts on to assess systems, provide technical recommendations using a variety of tools, and coordinate remediation of findings.
• Leverage multiple SIEM platforms and SOAR to ensure tracking and coordinate with relevant teams to determine exposure to vulnerabilities and misconfigurations, and to get them remediated.
• Ensure security of all types of cloud systems from various major vendors, including Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service offerings in use.
• Communicate cybersecurity recommendations to responsible parties such as system owners and engaging in both tracking and verification of their remediation efforts.
• Develop and test new tools and services as they become available for applicability of findings on customer networks and later refining those findings to eliminate false positive results.
• Apply a zero-trust architecture framework to on-premises, standalone, and cloud IaaS, PaaS and SaaS system types
• Build working relationships, within the team, office, and with external stakeholders to effectively complete the mission, while acknowledging and respecting stakeholder needs and requirements.