InfoSec Engineer (DoD RMF) — Cloud, SIEM & Automation

Peraton; Annapolis (MD); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton is seeking an Information Systems Security Engineer (ISSE) to support our customer onsite in Annapolis Junction. The role focuses on designing, implementing, and maintaining enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational policies.

Responsibilities include SDLC security engineering, vulnerability management, cloud and container security, incident response, and automation scripting to streamline remediation and monitoring activities.

Qualifications

• Active Top Secret with SCI Eligibility.
• DoD 8570.1-M/8140 IAT Level III certs (SecurityX/CASP, GCIH, CISA, CISSP) required.
• Strong background in networking, cloud security, Kubernetes, and DevSecOps.
• Hands-on experience with Nessus, CyberArk, Trellix, Splunk, VMware vSphere, GitLab, Windows Server, RHEL and Ubuntu Linux.
• Experience in leading projects and mentoring junior ISSEs.
• Proven ability to present technical briefings to leadership.

Responsibilities

• Design, implement, and maintain enterprise security architecture per RMF, STIGs, CIS benchmarks.
• Perform SDLC security engineering across requirements analysis, design reviews, testing, and accreditation support.
• Implement vulnerability management using Nessus, ACAS, and Qualys.
• Integrate cybersecurity into Windows/Linux servers, cloud, virtualization, and container environments.
• Support incident response and forensic investigations using Splunk Enterprise.
• Develop automation scripts using PowerShell, Python, Bash, and Ansible to streamline remediation, auditing, and monitoring.
• Collaborate with admins, ISSOs, and app teams to remediate findings and enforce secure baselines.
• Perform security impact analyses for changes, deployments, and upgrades.
• Engineer endpoint protection and hardening with Trellix ePO, host firewalls, and application whitelisting.
• Evaluate and implement cybersecurity tools to improve posture, monitoring, and threat detection.
• Produce security documentation and executive risk assessment reports.
• Monitor, detect, and respond to cyber events within information systems and networks.
• Assist integrated cyber defense and support ongoing authorization programs.
• Establish framework to measure cyber risk in the marketplace.
• Determine security requirements by evaluating business strategies and conducting risk analyses.
• Implement security systems with intrusion detection methods, testing, and maintenance.
• Maintain security by ensuring compliance to standards and conducting training.
• Design for DoD IA architectures for computing, network, and enclave environments.
• Ensure architecture supports secure development and operation.

Skills

Networking (TCP/IP, firewalls, VPNs)

Cloud security (AWS/Azure)

Kubernetes

DevSecOps

Scripting: PowerShell, Python, Bash, 1

Security architecture design

Education

BS/BA in CS/Engineering

MS/MA in CS/Engineering

Tools

Nessus

ACAS

Qualys

Trellix ePO

CyberArk

Splunk Enterprise

VMware vSphere

GitLab

Windows Server

Red Hat Enterprise Linux

Ubuntu Linux

Job description

Peraton is seeking an Information Systems Security Engineer (ISSE) to support our customer onsite in Annapolis Junction. The role focuses on designing, implementing, and maintaining enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational policies.

Responsibilities include SDLC security engineering, vulnerability management, cloud and container security, incident response, and automation scripting to streamline remediation and monitoring activities.