Federal InfoSec & Privacy Advisor: RMF, HIPAA, Cloud

Peraton; Woodlawn (MD); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Security Advisor to lead security engineering, governance, risk and compliance for a federal program. You will oversee day-to-day security operations, uphold NIST RMF, HIPAA/ARS, and CMS requirements, and drive continuous security improvement across cloud, on-premise, and integration workstreams.

You will partner with program leadership to maintain ATO, safeguard PHI/PII, and deliver compliant services at scale, while coordinating audits and incident response activities.

Qualifications

• Experience in cybersecurity across engineering, compliance, and operations.
• 3+ years in security leadership/management on federal programs.
• Hands-on with SIEM/EDR, vulnerability management, and cloud security (AWS GovCloud/Azure Government).
• Strong documentation (SSP, SAR, POA&M) and audit engagement.

Responsibilities

• Own security architecture and control implementation across apps, infra, and cloud per NIST SP 800-53 baselines.
• Drive vulnerability management and configuration baselines (DISA STIGs, CIS, SCAP).
• Lead RMF activities including SSP, assessment, POA&M, and continuous monitoring.
• Ensure HIPAA CMS ARS, 45 CFR 164, and HHS policies compliance.
• Coordinate audits, evidence collection, and control testing.
• Lead incident response for PHI/PII incidents; triage, containment, and forensics.
• Manage access control, MFA, backups, DR tests, and monitoring dashboards.
• Enforce data classification, encryption, and key management for CMS/HHS.
• Contribute to risk registers and monthly security status updates for CMS.
• Translate security concepts for technical and non-technical audiences.
• Collaborate with PM, Engineering, QA, Operations, and CMS teams.
• Contribute to security requirements for renewals and bids.

Skills

Security leadership

RMF/NIST knowledge

Cloud security

Threat vulnerability

Documentation

Education

BS/BA

MS/MA

PhD

Tools

SIEM/EDR

AWS GovCloud

Azure Government

DISA STIGs

CIS Benchmarks

Job description

Peraton is seeking a Security Advisor to lead security engineering, governance, risk and compliance for a federal program. You will oversee day-to-day security operations, uphold NIST RMF, HIPAA/ARS, and CMS requirements, and drive continuous security improvement across cloud, on-premise, and integration workstreams.

You will partner with program leadership to maintain ATO, safeguard PHI/PII, and deliver compliant services at scale, while coordinating audits and incident response activities.