Cyber IT Specialist

Peraton; Beltsville (MD); On-site; USD 66,000 - 106,000; Full time

Job summary

Peraton is seeking a Cyber IT Specialist in Beltsville, MD to join our Federal Strategic Cyber Group. The role supports 24/7 cybersecurity operations across OpenNet, ClassNet, DMZ, MAG, GCC, and cloud platforms, ensuring availability and security visibility.

You will triage incidents, manage ServiceNow tasks, and coordinate MIRP activities while collaborating with SOs, ISSOs, and enterprise scanning teams. A CS/CSIRT mindset with strong communication is essential.

Qualifications

• Bachelor's degree and 1 year of experience; 4 years may substitute.
• Must possess or obtain one of the following certifications: CCNA Security; CEH; CISSP; CySA+; GICSP; GSEC; Security+ CE; CND; SSCP
• Exposure to monitoring tools such as Splunk or SolarWinds.
• Basic familiarity with ServiceNow or similar ITSM platforms for incident and request management.
• Understanding of incident response fundamentals, including severity classification and escalation procedures.
• Working knowledge of Windows operating systems; Linux exposure is a plus.
• Strong analytical and troubleshooting skills with a willingness to learn.
• Demonstrated strong written and verbal communication skills; U.S. citizenship required.
• Must be able to obtain interim Secret security clearance prior to start; final Top Secret clearance required.

Responsibilities

• Support 24/7/365 enterprise cybersecurity operations across OpenNet, ClassNet, DMZ, NEN/DIN, MAG, GCC, and Google Workspace.
• Monitor security platforms to ensure system availability, performance, and visibility.
• Manage ServiceNow incidents, requests, and tasks with triage, escalation, and documentation per SLAs.
• Troubleshoot enterprise infrastructure across Windows, Linux, VMware, and Nutanix environments.
• Coordinate Major Incident Response Plan activities and communicate with stakeholders.
• Support vulnerability management across FISMA authorization boundaries.
• Collaborate with System Owners, ISSOs, and Enterprise Scanning personnel for compliance records.
• Maintain asset inventories, Tenable scanning docs, and FISMA records using Excel and ServiceNow.
• Query security datasets with Databricks in Azure Government for analytics and reporting.
• Assist IAM operations using ServiceNow, CyberArk, ARS, PHUB, and Okta.

Skills

Analytical thinking

Troubleshooting

Communication

Education

Bachelor’s degree

Tools

Splunk

SolarWinds

ServiceNow

CyberArk

Okta

Microsoft Defender for Endpoint

Tenable Exposure Management

VMware

Nutanix

Azure Government

Job description

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Responsibilities

Peraton is looking for a Cyber IT Specialistto become part of our Federal Strategic Cyber Group.

Location: Beltsville, MD. Days: Tuesday - Saturday; Hours: TBD

Role & Responsibilities:

• Support 24/7/365 enterprise cybersecurity operations across OpenNet, ClassNet, DMZ, NEN/DIN, Microsoft Azure Government (MAG), Government Community Cloud (GCC), and Google Workspace (OOB) environments.
• Monitor mission-critical infrastructure and security platforms — including Splunk, SolarWinds, Microsoft Defender for Endpoint (MDE), Zeek/Bro, and Suricata — to ensure system availability, performance, and security visibility.
• Maintain operational continuity through shift turnovers, Task List Reports, mailbox monitoring, and timely communication of incidents, system changes, and outstanding operational activities.
• Create, update, and manage ServiceNow incidents, service requests, and operational tasks, performing initial triage, troubleshooting, escalation, resolution verification, and documentation in accordance with established procedures and Service Level Agreements (SLAs).
• Troubleshoot enterprise infrastructure, applications, and virtual machines across Windows, Linux, VMware, and Nutanix environments, coordinating technical resources to restore services and minimize operational disruptions.
• Coordinate Major Incident Response Plan (MIRP) activities, including incident bridge setup, stakeholder notifications, technical escalations, and cross-functional troubleshooting to support timely service restoration.
• Support enterprise vulnerability management through Tenable Exposure Management, coordinating scanning activities, vulnerability remediation, asset validation, and compliance tracking across multiple FISMA authorization boundaries.
• Collaborate with System Owners (SOs), Information System Security Officers (ISSOs), and Enterprise Scanning personnel to resolve asset discrepancies, address vulnerability findings, and maintain accurate FISMA compliance records.
• Maintain enterprise asset inventories, Tenable scanning documentation, and FISMA boundary records using Microsoft Excel and ServiceNow, supporting asset accountability, remediation tracking, and enterprise security reporting.
• Utilize Databricks within Microsoft Azure Government to query security datasets, review operational data, and support cybersecurity analytics, trend analysis, and reporting activities.
• Support endpoint security operations through MDE deployment, configuration, and troubleshooting across Windows and Linux systems while maintaining Splunk log collection and monitoring capabilities.
• Support enterprise Identity and Access Management (IAM) operations using ServiceNow, CyberArk, ARS, PHUB, and Okta, facilitating account provisioning, privileged access requests, and CAC/PIV authentication across enterprise environments.
• Investigate recurring incidents, perform trend analysis, and contribute to root cause analysis (RCA) efforts to identify corrective actions, improve infrastructure reliability, and reduce operational disruptions.
• Prepare operational reports and deliver briefings to government and contractor leadership on infrastructure health, ongoing incidents, operational risks, and service restoration efforts, ensuring timely communication of Priority 1 and Priority 2 incidents in accordance with established SLAs.
• Support disaster recovery, change management, quality assurance, and hardware asset coordination — including equipment inventory and shipments to CONUS and OCONUS locations — to maintain operational readiness and mission continuity.

Qualifications

Minimum requirements are:

• A Bachelor’s degree and 1 years of experience.
  • An additional 4 years of experience may be substituted in lieu of the bachelor'sdegree requirement.
• Must either possess and maintain, or obtain prior to start date, one of the following professional certifications:
  • CCNA Security; CEH; CISSP; CySA+; GICSP; GSEC; Security+ CE; CND; SSCP
• Exposure to or coursework in monitoring tools such as Splunk or SolarWinds.
• Basic familiarity with ServiceNow or similar ITSM platforms for incident and request management.
• Understanding of incident response fundamentals, including severity classification and escalation procedures.
• Working knowledge of Windows operating systems;Linux exposure is a plus.
• Strong analytical and troubleshooting skills with a willingness to learn.
• Demonstrated strong written and verbal communication skills with the ability to provide clear, timely updates.
• U.S. citizenship required.
• Must be able to obtain an interim Secret security clearance prior to start date.
  • Must be able to obtain a final Top Secret security clearance.

Preferred Qualifications:

• Familiarity with VMware or Nutanix virtualization environments.
• Exposure to cloud platforms such as Microsoft Azure Government (MAG) or Government Community Cloud (GCC).
• Basic awareness of FISMA compliance frameworks or federal IT security requirements.
• Familiarity with IAM or privileged access management (PAM) concepts (CyberArk, Okta, or similar).
• Familiarity with vulnerability management tools such as Tenable Nessus or Tenable Exposure Management.
• A+, ITIL Foundation, or equivalent entry-level certification.

Target Salary Range

$66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed athttps://www.careers.peraton.com/benefits.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.