External Job Posting Title Information Systems Security Engineer (ISSE)

Peraton; Herndon (VA); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

25 days PTO

Bonus plan

Enhanced benefits

Job summary

Peraton is seeking an Information System Security Engineer (ISSE) to lead security engineering across complex networks and ensure RMF‑aligned controls are designed and implemented for new and existing systems.

In this role you will validate configurations, support testing, monitor production controls, and contribute to risk assessments and POA&M management. The position emphasizes DevSecOps integration, continuous monitoring, and cross‑team collaboration on security requirements.

Qualifications

• Bachelor’s degree in a relevant field with 10+ years of experience or a Master’s with 8+ years; additional 4 years may substitute a degree.
• Active TS/SCI or SCI eligibility with polygraph.
• Experience supporting RMF A&A processes and documentation.
• Experience collaborating with developers/architects to implement security requirements.
• Ability to guide developers on policy and compliance.
• Experience with DISA STIGs and STIG Viewer.
• Extensive experience with Linux operating systems.
• Proven experience with Security Information and Event Monitoring (Splunk).
• Hands-on in developing and validating security controls and test procedures.
• Knowledge of current security risks, protocols, and threat landscapes.
• DoD 8570 IAT/IAM Level II certification (e.g., Security+).
• Experience with RMF tools such as Xacta.
• Ability to work full-time in a SCIF.

Responsibilities

• Lead security engineering activities across complex information systems.
• Design and implement RMF-aligned security controls for new and existing networks.
• Validate compliance with configuration guidance and support testing of security designs.
• Monitor security control implementations in production environments and address risk findings.
• Contribute to POA&M management and system-level security metrics.
• Analyze logs and support IS/SSOC activities using SIEM tools.
• Review ACAS scans and advise on mitigations and remediation.
• Assist with DISA STIG analysis and secure configurations.
• Collaborate with system leads, ISSOs, and program managers on security tasks.
• Develop and validate security requirements and risk mitigations.
• Lead audits and ensure regulatory compliance across environments.

Skills

SIEM Analysis

Vulnerability Analysis

STIG Compliance

DevSecOps

Continuous Monitoring

Security Engineering

Cross‑Team Coordination

Security Requirements

Risk Assessment

Security Audits

Education

Bachelor's degree

Master's degree

Tools

Xacta

Splunk

STIG Viewer

Linux

Job description

Responsibilities

Responsibilities

The Information System Security Engineer (ISSE) leads and executes security engineering activities across complex information systems. Responsibilities include designing and implementing security architectures for new and existing networked systems, ensuring hardware, operating systems, and applications meet cybersecurity requirements and RMF‑aligned security controls.

The ISSE validates compliance with configuration guidance, supports testing and evaluation of security designs, and assists with integration testing to confirm that safeguards protecting data and system interconnections function as intended. In production environments, the ISSE continuously monitors security control implementations, responds to risk findings, supports risk assessments, and contributes to POA&M management. The role also includes supporting the development and reporting of system‑level security metrics.

Core Functions

• Log Review & SIEM Analysis — Support ISSO activities by analyzing security logs using SIEM tools such as Splunk and recommending appropriate actions.
• Vulnerability Analysis — Review ACAS scan results and assess findings.
• STIG Compliance — Assist with DISA STIG analysis and implementation to ensure compliant system configurations.
• DevOps/DevSecOps Integration — Ensure development processes incorporate security requirements throughout the lifecycle.
• Continuous Monitoring — Validate system‑level ConMon requirements and ensure alignment with monitoring strategies.
• Secure Engineering Practices — Apply secure design, architecture, and coding principles when implementing controls.
• Cross‑Team Coordination — Collaborate with system leads, ISSOs, and program managers on security activities.
• Security Requirements Engineering — Define, design, implement, and evaluate system and network security measures.
• Risk Assessment — Identify risks, evaluate mitigations, assess residual risk, and provide recommendations.
• Technical Security Solutions — Develop and implement solutions addressing vulnerabilities.
• Security Audits — Lead technical components of internal audits and investigations.
• Regulatory Compliance — Ensure adherence to government regulations and industry standards.

SITE III JIOC Contract Overview

The SITE III JIOC contract establishes a comprehensive, multi‑discipline framework for requirements engineering, solutions engineering, scheduling, reliability, resiliency, service development, integration, test and evaluation, maintainability, and enterprise analysis. This framework supports the full National Defense Intelligence enterprise—including Combatant Commands, Partner Nations, and Federal Agencies—to ensure timely, accurate Joint Intelligence Operations Center (JIOC) collection, correlation, and dissemination.

Our team leverages industry best practices in architecture design, data science, cloud services, DevSecOps, and platform integration to build, sustain, and continuously enhance enterprise business systems, system‑of‑systems integrations, and back‑end workflow processes.

Qualifications

Required Qualifications

• Bachelor’s degree in an area relevant to the position with 10+ years of relevant experience OR a Master’s degree in an area relevant to the position with 8+ years of relevant experience; an additional 4 years of relevant experience maybe considered in lieu of a degree.

• Active TS/SCI or SCI eligibility and active polygraph (or ability to obtain a polygraph).
• Experience supporting RMF Assessment & Authorization processes and documentation.
• Experience collaborating with developers and architects to interpret and implement security requirements.
• Ability to guide developers on security policy and technical compliance.
• Experience with DISA STIGs and STIG Viewer.
• Extensive experience with Linux operating systems
• Proven experience performing Systems Security tasks including: Security Information and Event Monitoring (Splunk)
• Hands‑on experience developing and validating security controls and test procedures.
• Knowledge of current security risks, protocols, and threat landscapes.
• DoD 8570 IAT/IAM Level II certification (e.g., Security+).
• Experience with RMF tools such as Xacta.
• Ability to work full‑time in a SCIF.

Desired Qualifications

• Experience with AWS or Google Cloud‑hosted systems.
• Experience with Cloudtrail, Cloudwatch, Openshift, and Antible
• Experience working in a DevSecOps environment and toolchain.
• Experience developing and using security tools for scanning, testing, monitoring, and reporting.
• Experience planning and overseeing configuration changes across multiple networks.
• Strong analytical and problem‑solving skills.

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligible to participate in an attractive bonus plan

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.