Information System Security Officer

Peraton; Annapolis (MD); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton seeks an information security professional to support ISSM/ISSO activities across multiple environments in the Annapolis area. The role involves executing RMF tasks, maintaining artifacts, and leading continuous monitoring efforts to ensure compliant, secure systems.

Candidates should hold a Top Secret clearance with SCI eligibility and DoD 8570 IAM II certification, with extensive experience in NIST frameworks, vulnerability tooling, and collaboration with ISO and PMs.

Qualifications

• Active Top Secret clearance withSCI eligibility.
• Five years with a BS/BA; three years with an MS/MA; four additional years may substitute for a degree.
• Security+ or equivalent certification (DoD 8570 IAM Level II).
• Experience with SAP assessments and authorizations.
• Three+ years in ATO process, continuous monitoring, POA&Ms, SA, NIST 800-37/800-53 Rev4/Rev5; collaboration with ISO/PM.
• Experience with SCAP, STIGs, and other compliance tools.
• Strong written and verbal communication; able to work with teams.

Responsibilities

• Assist the ISSM with information assurance efforts across environments.
• Perform ISSO roles and responsibilities as per JSIG and regulations.
• Execute RMF activities: control oversight, evidence collection, assessment support, POA&M management, continuous monitoring.
• Maintain security artifacts: SSP, control narratives, diagrams, CM plan, incident handling, contingency artifacts.
• Operate continuous monitoring: vulnerability management, config compliance, patching coordination, triage, risk acceptance, remediation verification.
• Review and approve security changes; validate configurations after upgrades.
• Support incident response and reporting: investigations, containment, evidence preservation, lessons learned.
• Ensure least privilege governance: account management, privileged access workflows, access reviews, audit compliance.
• Translate security requirements into implementable guidance for engineering teams (testable and automatable where possible).

Skills

Top Secret clearance

Security compliance

Written & verbal communication

Team collaboration

SCRUM methodologies

Education

BS/BA degree

MS/MA degree

4+ years experience in lieu of degree

Tools

Splunk

ACAS

Nessus

SCAP

Job description

Responsibilities

• Assist the Information System Security Manager (ISSM) with information assurance efforts, and systems across numerous environments
• Perform Information System Security Officer (ISSO) roles and responsibilities as prescribed by the JSIG and other applicable regulations
• Execute and maintain RMF activities (e.g., control implementation oversight, evidence collection, assessment support, POA&M management, continuous monitoring)
• Maintain security authorization artifacts (e.g., SSP, control narratives, diagrams, inheritance/leverage controls, CM plan, incident handling plan, contingency artifacts, user/admin procedures)
• Operate continuous monitoring: vulnerability management, config compliance, patching coordination, scan result triage, risk acceptance, and remediation verification
• Review and approve security-relevant changes through configuration/change control and validate security configurations after major upgrades
• Support incident response and reporting: participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learned
• Ensure least privilege/access governance: account management oversight, privileged access workflows, periodic access reviews, and audit compliance requirements
• Translate security requirements into implementation guidance that engineering teams can operationalize (clear, testable, and automatable where possible)

Qualifications

Required qualifications

• Active Top Secret clearance with SCI eligibility
• 5 years with BS/BA; 3 years with MS/MA; 4 additional years of experience may be considered in lieu of degree
• Security+ or equivalent certification (DoD 8570 IAM Level II)
• Experience with SAP assessments and authorizations
• 3+ years experience with Authority to Operate (ATO) process, continuous monitoring, POA&M's, Security Authorizations (SA), NIST 800-37, NIST 800-53 Rev4/ Rev5, working with Information System Owners (ISO) and Program Managers (PM)
• Experience with SCAP, STIGs, and other compliance tools
• Proven written and verbal communication skills, and the ability to work well with team members

Preferred qualifications

• Experience with SCRUM methodologies
• Experience with Ongoing Authorizations
• Experience with Splunk and/or other auditing compliance tools
• Experience with ACAS, Nessus, and/or other vulnerability scanners

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law. All