Blue Team Infrastructure SME

VulnU; Northern (KY); Hybrid; USD 86,000 - 138,000; Full time

Job summary

Peraton is seeking a Blue Team Senior Engineer / Infrastructure SME to join the DoS Diplomatic Security Cyber Mission (DSCM) in Rosslyn, VA. You will assess systems, provide technical recommendations, and coordinate remediation using SIEM/SOAR across on-prem and cloud environments.

Responsibilities include implementing zero-trust, coordinating with owners, and building stakeholder relationships to achieve mission success.

Qualifications

• Bachelor's degree with 5+ years of experience; 3+ years with a Master’s; PhD not required.
• Possess and maintain, or be able to obtain before start date, the listed professional certifications (CISSP-ISSAP, CISSP-ISSEP, CISSP, CS, Security+ etc.).
• Proficient in SIEM platforms (e.g., Splunk) and EDR tools (e.g., Tanium, Defender for Endpoint).
• Proficient in ServiceNow SOAR and cloud native portals (Azure Security Center, AWS Security Hub).
• Able to communicate cybersecurity recommendations clearly to stakeholders and coordinate remediation.

Responsibilities

• Assist with enterprise efforts to assess systems and provide technical recommendations.
• Leverage SIEM and SOAR to track exposure and coordinate remediation.
• Ensure security of cloud and on-premises systems across IaaS, PaaS, SaaS.
• Communicate findings and remediation status to system owners and stakeholders.
• Apply zero-trust architecture to various environments and refine findings to reduce false positives.

Skills

SIEM platforms

Endpoint Detection & Response

ServiceNow SOAR

Cloud security

Zero-Trust

Communications

MITRE ATT&CK

Education

Bachelor's degree

Master's degree

CCNA / NET+

Tools

Splunk

Tanium

Microsoft Defender for Endpoint

ServiceNow SOAR

Azure Security Center

AWS Security Hub

KQL

Job description

Peraton is currently seeking to hire a Blue Team Senior Engineer / Infrastructure Subject Matter Expert to become part of Peraton’s Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes.Location: Rosslyn, VAWhat You'll Do:Assist with enterprise efforts on to assess systems, provide technical recommendations using a variety of tools, and coordinate remediation of findings.Leverage multiple SIEM platforms and SOAR to ensure tracking and coordinate with relevant teams to determine exposure to vulnerabilities and misconfigurations, and to get them remediated.Ensure security of all types of cloud systems from various major vendors, including Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service offerings in use.Communicate cybersecurity recommendations to responsible parties such as system owners and engaging in both tracking and verification of their remediation efforts.Develop and test new tools and services as they become available for applicability of findings on customer networks and later refining those findings to eliminate false positive results.Apply a zero-trust architecture framework to on-premises, standalone, and cloud IaaS, PaaS and SaaS system typesBuild working relationships, within the team, office, and with external stakeholders to effectively complete the mission, while acknowledging and respecting stakeholder needs and requirements.QualificationsRequired:Bachelor's a degree and 5 years of experience; 3 Years with Masters; 0 Years with PhD. An additional four (4) additional years of experience may be substituted in lieu of the degree requirement.Possess and maintain, or be able to obtain before start date, the following professional certification:CISSP-ISSAPCISSP-ISSEPCISSPSecurity+ CECySA+PPDAgile ICSNOW App DevProficient in SIEM platform usage, such as Splunk.Proficient in the use of Endpoint Detection & Response tools, such as Tanium and Microsoft Defender for Endpoint.Proficient in the use of the ServiceNow SOAR platform.Understanding with cloud native portals such as Azure Security Center or AWS Security Hub to identify misconfigurations and security issues.Competent in communicating across all media to build relationships with stakeholders and achieve mission objectives.U.S. citizenship requiredActive Secret security clearanceAbility to obtain a Top Secret security clearancePreferred Qualifications:CCNA or NET+ certification.Knowledge of and experience with security subsystems (e.g. firewalls, VPN servers, IDS/IPS, etc.) is preferred.Working knowledge of network technologies.Working knowledge of Kusto Query Language (KQL).Knowledge of Network Device configurations.Familiarity with the MITRE ATT&CK FrameworkThe ability to solve network-related problems by using diagnostic techniques and protocols.Familiarity with backbone and Wide Area networking (WAN) components, wiring infrastructures, VPNs, Layer 2 and 3 networking protocols, multicast, firewalls, DHCP, DNS, IP address management and network monitoring software is preferred.Familiarity with Zero-Trust Architecture (ZTA) framework.Peraton OverviewPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.Target Salary Range$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.