Information Security Systems Engineer (ISSE)

Peraton; Chantilly (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Peraton is seeking an Information System Security Engineer to design, implement, and continuously improve the security posture of the organization’s information systems, networks, and data.

You will ensure compliance with customer security frameworks while proactively identifying risks and guiding security across DevSecOps, cloud environments, and on-premise assets.

Qualifications

• Bachelor’s degree plus 12+ years of experience; Master’s plus 10+ years; 4 years may substitute for degree.
• At least 3 years of hands-on ISSE experience in the customer environment.
• Knowledge of security frameworks and standards including NIST SP 800-53, NIST CSF, ISO 27001, CIS Controls.
• Experience with security technologies: firewalls, SIEM, vulnerability management, endpoint protection, IAM, encryption, network controls.
• Proficiency securing Windows and Linux OS, networks, cloud (AWS/Azure/GCP), and applications.

Responsibilities

• Evaluate and improve security controls across systems, networks, endpoints, AWS, and applications.
• Perform risk and vulnerability assessments based on controls and architecture reviews.
• Document cybersecurity standards, procedures, and system security plans.
• Collaborate with IT, engineering, development, and business teams to embed security in design (DevSecOps).
• Evaluate emerging threats and security solutions; recommend program improvements.
• Provide security guidance to technical and nontechnical stakeholders.
• Support continuous monitoring, metrics and security posture improvement initiatives.

Skills

TS/SCI with polygraph

ISSE experience

NIST SP 800-53

CSF

CIS Controls

Firewalls & IAM

Cloud security

Windows/Linux security

Education

Bachelor's degree

Master's degree (preferred)

Equivalent practical experience

Tools

Jira

SIEM platforms

Vulnerability management tools

Endpoint protection

IAM

Encryption tools

Job description

Required

• TS/SCI with relevant polygraph
• BA/BS and 12+ years of experience; Masters and 10+ years of experience; an additional four years of experience may be considered in lieu of degree.
• At least 3 years of hands-on experience in information systems security, cybersecurity engineering, or related roles in the customer environment as an ISSE.
• Working knowledge of security frameworks and standards (NIST SP 80053, NIST Cybersecurity Framework, ISO 27001, CIS Controls, etc.).
• Experience with security technologies such as firewalls, SIEM platforms, vulnerability management tools, endpoint protection, identity and access management (IAM), encryption, and network security controls.
• Proficiency in assessing and securing operating systems (Windows, Linux), networks, cloud environments (AWS, Azure, or GCP), and applications.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related field (or equivalent practical experience).
• Relevant industry certifications such as CISSP, CISM, CompTIA Security+, CEH, GIAC certifications (GSEC, GCIA, GCIH, etc.), or cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, etc.).
• Agile software development cycle including the ability to use Jira.
• Hands-on experience with scripting or automation (Python, PowerShell, Bash) for security tooling and processes.
• Prior experience supporting compliance audits or regulatory frameworks relevant to the organization.
• Experience in incident response, forensic analysis, or security operations center (SOC) environments.
• Knowledge of zero trust architecture principles and modern identity/security architectures.

Position Summary

The Information System Security Engineer is responsible for designing, implementing, maintaining, and continuously improving the security posture of the organization’s information systems, networks, applications, and data. This role ensures compliance with Customer security frameworks, regulations, and industry best practices while proactively identifying and mitigating risks to protect information assets.

Responsibilities

• Evaluate, maintain, and improve security controls, architectures, and solutions across systems, networks, endpoints, AWS cloud environments, and applications.
• Perform risk assessments and vulnerability assessments based on controls, security architecture reviews.
• Document and maintain cybersecurity environment, standards, procedures, and system security plans.
• Collaborate with IT, engineering, development, and business teams to embed security into system design, development, and operational processes (DevSecOps practices).
• Evaluate emerging threats, technologies, and security solutions; recommend improvements to the security program.
• Provide security guidance and awareness support to technical and nontechnical stakeholders.
• Support continuous monitoring, metrics reporting, and security posture improvement initiatives.