Blue Team Infrastructure SME

Peraton; Arlington (VA); Sur place; USD 86 000 - 138 000; Plein temps

Résumé du poste

Peraton is seeking a Blue Team Senior Engineer / Infrastructure SME to support the DoS DSCM program. Location is Rosslyn, VA, with responsibilities spanning enterprise system assessment, remediation coordination, and cross-team collaboration.

The role requires advanced security certifications, experience with Splunk, Tanium, Defender for Endpoint, and ServiceNow SOAR, and a strong understanding of cloud security (Azure/AWS).

Qualifications

• Bachelor's degree with 5 years of exp; 3 years with a Masters; 0 with PhD; 4 extra years may substitute.
• CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+ and related certs preferred.
• Proficiency in Splunk and SOAR platforms; strong endpoint protection tools.

Responsabilités

• Assist with enterprise efforts to assess systems and provide technical recommendations.
• Coordinate remediation of findings with relevant teams.
• Leverage SIEM/SOAR to track exposures and drive remediation.
• Ensure security of on-prem and cloud IaaS, PaaS, SaaS environments.
• Communicate cybersecurity recommendations to system owners and verify remediation.
• Develop and test new tools for findings applicability and reduce false positives.
• Apply a zero-trust architecture to all system types including cloud and on-prem.

Connaissances

Zero-trust

Cloud security

SIEM

SOAR

Formation

Bachelor's degree in IT or related field

CISSP-ISSAP

CISSP

CISSP-ISSEP

Security+ CE

CySA+

SNOW App Dev

Agile IC

Top Secret eligibility

Active Secret clearance

Outils

Splunk

Tanium

Microsoft Defender for Endpoint

ServiceNow SOAR

Azure Security Center

AWS Security Hub

Kusto Query Language (KQL)

Description du poste

Responsibilities

Peraton is currently seeking to hire a Blue Team Senior Engineer / Infrastructure Subject Matter Expert to become part of Peraton's Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes.

Location: Rosslyn, VA

What You'll Do:

Assist with enterprise efforts on to assess systems, provide technical recommendations using a variety of tools, and coordinate remediation of findings.

Leverage multiple SIEM platforms and SOAR to ensure tracking and coordinate with relevant teams to determine exposure to vulnerabilities and misconfigurations, and to get them remediated.

Ensure security of all types of cloud systems from various major vendors, including Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service offerings in use.

Communicate cybersecurity recommendations to responsible parties such as system owners and engaging in both tracking and verification of their remediation efforts.

Develop and test new tools and services as they become available for applicability of findings on customer networks and later refining those findings to eliminate false positive results.

Apply a zero-trust architecture framework to on-premises, standalone, and cloud IaaS, PaaS and SaaS system types

Build working relationships, within the team, office, and with external stakeholders to effectively complete the mission, while acknowledging and respecting stakeholder needs and requirements.

Qualifications

Required:

• Bachelor's a degree and 5 years of experience; 3 Years with Masters; 0 Years with PhD. An additional four (4) additional years of experience may be substituted in lieu of the degree requirement.
• Possess and maintain, or be able to obtain before start date, the following professional certification:
• CISSP-ISSAP
• CISSP-ISSEP
• CISSP
• Security+ CE
• CySA+
• PPD
• Agile IC
• SNOW App Dev
• Proficient in SIEM platform usage, such as Splunk.
• Proficient in the use of Endpoint Detection & Response tools, such as Tanium and Microsoft Defender for Endpoint.
• Proficient in the use of the ServiceNow SOAR platform.
• Understanding with cloud native portals such as Azure Security Center or AWS Security Hub to identify misconfigurations and security issues.
• Competent in communicating across all media to build relationships with stakeholders and achieve mission objectives.
• U.S. citizenship required
• Active Secret security clearance
• Ability to obtain a Top Secret security clearance

Preferred Qualifications:

• CCNA or NET+ certification.
• Knowledge of and experience with security subsystems (e.g. firewalls, VPN servers, IDS/IPS, etc.) is preferred.
• Working knowledge of network technologies.
• Working knowledge of Kusto Query Language (KQL).
• Knowledge of Network Device configurations.
• Familiarity with the MITRE ATT&CK Framework
• The ability to solve network-related problems by using diagnostic techniques and protocols.
• Familiarity with backbone and Wide Area networking (WAN) components, wiring infrastructures, VPNs, Layer 2 and 3 networking protocols, multicast, firewalls, DHCP, DNS, IP address management and network monitoring software is preferred.
• Familiarity with Zero-Trust Architecture (ZTA) framework.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.