Information Systems Security Engineer (ISSE)

Peraton; Linthicum (MD); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton in Maryland seeks a cybersecurity professional to support the ISSO with log review and analysis using SIEM tools, conduct vulnerability analysis of ACAS scans, and ensure STIG‑compliant solutions. The role emphasizes DevSecOps practices to weave security into development and operations.

You will lead the technical aspects of internal security audits, coordinate with system leads and program managers, and develop security controls across computer systems and networks.

Qualifications

• Bachelor’s degree and 8+ years of security experience or a Master’s with 6+ years, or 3 years with a PhD.
• Active Top Secret clearance with SCI eligibility.
• IAT Level II certification (CompTIA Security+ preferred).
• Experience guiding developers on security policy and requirements.

Responsibilities

• Support the ISSO with Log Review/Analysis using SIEM tools (Splunk, etc.).
• Conduct Vulnerability Analysis and Review of ACAS scans.
• Assist with DISA STIGs implementation to STIG-compliant solutions.
• Lead DevOps/SecOps to integrate security throughout development processes.
• Coordinate security activities with system leads, ISSOs and program managers.
• Determine, design, implement, and evaluate security requirements and measures.
• Develop and implement technical solutions to address vulnerabilities.

Skills

Security requirements

Policy guidance

IAT Level II

Top Secret/SCI

RMF knowledge

DevSecOps

Vulnerability analysis

DISA STIGs

Cloud platforms

Security testing

Education

Bachelor's degree in IT/Cybersecurity

Master's degree in IT/Cybersecurity

PhD (considered with experience)

Tools

STIG Viewer

Splunk

RHEL/CentOS

DISA STIGs

AWS

Azure

Job description

Responsibilities

The successful candidate will perform the following:

• Support the ISSO with Log Review/Analysis using SIEM tools (Splunk, etc.) to determine appropriate actions.
• Conduct Vulnerability Analysis and Review of ACAS scans.
• Assist with analysis and completion of DISA STIGs to ensure STIG-compliant solutions.
• Utilize DevOps, SecOps methodologies to analyze and ensure that development requirements effectively integrate security requirements throughout the entire process.
• Ensure ConMon requirements are addressed at the system level.
• Coordinate security activities with system leads, ISSO’s and program managers.
• Determine, design, implement, and evaluate the security requirements and measures of computer systems and networks.
• Assess potential risks, mitigation measures, residual risks, and providing recommendations to stakeholders.
• Develop and implement technical solutions to address security vulnerabilities.
• Conduct risk assessments and provide recommendations for mitigating risks.
• Lead the technical aspects of internal security audits and investigations.
• Ensure compliance with government regulations and industry standards.

Qualifications

Required Qualifications:

• Experience working with software developers and architects to understand security requirements.
• Experience guiding application developers on security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements.
• DISA STIGs and STIG Viewer experience.
• Hands‑on experience in developing and validating control implementations and test procedures.
• Knowledge of current security risks and protocols.
• Certifications: Active IAT Level II certification (CompTIA Security+ preferred).
• Security Clearance: Active Top Secret with SCI eligibility.
• Education: Bachelor’s degree and 8+ years of experience, or Master’s Degree and 6+ years of experience, or 3 years with PhD. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.

Desired Qualifications:

• Certifications: CASP+, CISM, CISSP-ISSAP, CISSP-ISSMP, FITSP-D, GCIA, GCSA, GICSP, GSEC, GDSA, GICSP, GMON, CCSP, CISSO, Cloud+, or CSSLP.
• Experience transitioning from RMF v4 to v5.
• Basic understanding of identity and access management system capabilities and configuration.
• Experience with cloud computing platforms such as AWS and Azure.
• Experience with TASKORDS, OPORDS, etc.
• Experience leading Cybersecurity (ISSO & ISSE) teams.
• Experience working with Redhat or CentOS Linux operating systems.
• Experience working in a DevSecOps.
• Creating and using security tools and processes for scanning, testing, monitoring, and reporting.
• Experience in planning and overseeing configuration changes for major applications across multiple networks.
• Good analytic and problem‑solving skills.

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.