Information Assurance Engineer: RMF, A&A & DevSecOps

Peraton; United States; On-site; USD 86,000 - 138,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision

401(k)

Paid time off

Job summary

Peraton is seeking an Information Assurance and Security Engineer to drive risk management, security testing, and compliance across the DEERS portfolio. You will design and implement security controls, support RMF/authorization efforts, and lead vulnerability mitigation in a DevSecOps environment.

The role requires DoD RMF expertise, DOD/NIST documentation proficiency, and experience with Fortify, Sonatype, BURP, and eMASS.

Qualifications

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD, 12 years with HS diploma
• Ability to obtain and maintain DOD Public Trust
• Hands-on experience with the DoD RMF and eMASS tooling
• In-depth knowledge of NIST SP 800-53 Rev 5, 800-37, 800-171 Rev 2
• Experience conducting vulnerability assessments and POA&Ms
• Experience with Fortify, Sonatype, BURP and DevSecOps in Agile environments
• DoD 8140.03 / 8570.01-M IAT/IAM Level II certification

Responsibilities

• Provide IA services to internal/external customers for network and information security across DEERS portfolio
• Design, develop, and implement security requirements in DevSecOps pipelines and cloud migration activities (OCI)
• Prepare and maintain security documentation per DoD/NIST guidelines (SSPs, SARs, POA&Ms, STIGs)
• Prepare ST&E plans and support formal security assessments with CSD and ISSOs
• Provide C&A/A&A support per RMF principles
• Conduct risk and vulnerability assessments; maintain mitigation strategies
• Develop and implement security enhancements; monitor IAVA and remediation
• Integrate Fortify/Sonatype/BURP scanning into production releases
• Secure configurations; verify STIG/NIST baselines; report results
• Support security program audits (DHA MERHCF, ICOFR, FIAR)

Skills

RMF knowledge

DevSecOps

NIST SP 800-53 Rev 5

Security assessment

Vulnerability management

Incident handling

Compliance analysis

Security architecture

Education

BS/BA in related field

MS/MA in related field

PhD in related field

HS diploma + extensive experience

Tools

Fortify

Sonatype

BURP

eMASS

OWASP tooling

Job description

Peraton is seeking an Information Assurance and Security Engineer to drive risk management, security testing, and compliance across the DEERS portfolio. You will design and implement security controls, support RMF/authorization efforts, and lead vulnerability mitigation in a DevSecOps environment.

The role requires DoD RMF expertise, DOD/NIST documentation proficiency, and experience with Fortify, Sonatype, BURP, and eMASS.