Information System Security Officer (ISSO)

Peraton Labs, Inc.; Laurel (MD); On-site; USD 146,000 - 234,000; Full time

Benefits offered by this job

Sign-on bonus available

Job summary

Peraton Labs, Inc. in Laurel, MD seeks a poly cleared Information System Security Officer to lead security operations for a mission-critical HPC environment.

You will own RMF activities and drive continuous monitoring to maintain ATO posture while partnering with subcontractor and customer personnel. This on-site role requires full-time work in Laurel, MD with a strong emphasis on risk management, security governance, and engineering collaboration.

Qualifications

• 6+ years of experience with a BS in computer science, IT, or related; MS with 4+ years also acceptable.
• Four years additional experience may substitute a Bachelor’s degree for total of 10 years of experience.
• DoD/IC or government systems experience is preferred.
• Active TS/SCI with a current polygraph is required.

Responsibilities

• Act as the ISSO supporting the system security lifecycle across development, operations, and modernization.
• Coordinate RMF tasks, evidence collection, assessment support, and POA&M management.
• Maintain authorization artifacts (SSP, control narratives, diagrams, and related artifacts).
• Operate continuous monitoring: vulnerability management, config compliance, patching coordination, and risk remediation.
• Review and approve security changes and validate configurations after major upgrades.
• Support incident response and post-incident lessons learned; preserve evidence.

Skills

RMF tasks

NIST SP 800-53

Vulnerability/configuration

Linux

Communication risk

Documentation

TS/SCI poly

Education

BS in CS/IT or related

MS with 4+ years experience alternative

Tools

eMASS

Container security

GRC tooling

Job description

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About The Role

Peraton Labs is seeking a poly cleared Information System Security Officer for a mission-critical, highly complex HPC environment enabling research across multiple security domains. You will own day-to-day security operations aligned to RMF, drive continuous monitoring, maintain ATO posture, and partner closely with subcontractor and customer personnel to ensure implementation and compliance.

This position requires full-time on-site work in Laurel, MD.

Key Responsibilities May Include

• Act as the ISSO supporting the system security lifecycle across development, operations, and modernization
• Execute and maintain RMF activities (e.g., control implementation oversight, evidence collection, assessment support, POA&M management, continuous monitoring)
• Maintain security authorization artifacts (e.g., SSP, control narratives, diagrams, inheritance/leverage controls, CM plan, incident handling plan, contingency artifacts, user/admin procedures)
• Operate continuous monitoring: vulnerability management, config compliance, patching coordination, scan result triage, risk acceptance, and remediation verification
• Review and approve security-relevant changes through configuration/change control and validate security configurations after major upgrades
• Support incident response and reporting: participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learned
• Ensure least privilege/access governance: account management oversight, privileged access workflows, periodic access reviews, and audit compliance requirements
• Translate security requirements into implementation guidance that engineering teams can operationalize (clear, testable, and automatable where possible)

• This position may be eligible for an increased sign-on bonus. Eligibility, bonus amount, and applicable terms and conditions will be discussed during the recruiting process

Qualifications

Required qualifications

• 6+ years of experience and a BS in computer science, IT, or related technical discipline, MS and 4+ years of experience. Four years of additional experience is required in lieu of a Bachelors' degree for a total of 10 years of experience
• 4+ years of experience supporting DoD/IC or government systems
• Hands-on experience executing RMF tasks and maintaining authorization artifacts (SSP, POA&Ms, continuous monitoring evidence)
• Strong working knowledge of NIST SP 800-53 controls and how they map to technical implementations and procedures
• Experience with vulnerability and configuration compliance workflows
• Familiarity with Linux-based enterprise environments and common hardening concepts
• Ability to communicate risk clearly to both technical engineers and non-technical leadership
• Strong documentation discipline
• Active TS/SCI security clearance with a current polygraph is required.

Preferred Qualifications

• Experience securing or assessing containerized workflows (e.g., container runtime hardening, image governance, supply chain considerations)
• Experience with eMASS (or comparable GRC tooling), security control inheritance models, and assessor engagement.
• Familiarity with vulnerability tooling and security monitoring concepts
• Active certifications such as: CISSP, CISM, CAP, GSLC, Security+, CCSP, etc.
• Experience with data protection requirements relevant to sensitive environments

Details

Target Salary Range: $146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.