Jr Information System Security Engineer (ISSE)

Peraton; Corridor North (MD); On-site; USD 112,000 - 179,000; Full time

Job summary

Peraton is seeking a Jr Information System Security Engineer (ISSE) in Annapolis Junction, MD to support DoD RMF compliance and cybersecurity operations. The role focuses on security architecture design, vulnerability management, incident response, and automation, using tools like Nessus, Splunk, CyberArk, Trellix, and VMware in mixed Windows/Linux environments and the cloud.

Active Top Secret with SCI eligibility and DoD 8570.1-M IAT III certification are required, with several years of

Qualifications

• 2 years with BS/BA; 0 years with MS/MA; 6 years with no degree
• Active Top Secret with SCI Eligibility
• DoD 8570.1-M/8140 IAT Level III certification (Security+, CASP, GCIH, CISA, CISSP)
• Experience with networking (TCP/IP, firewalls, VPNs), cloud security (AWS/Azure), Kubernetes, and DevSecOps
• Understanding of NIST SP 800-161, NIST RMF, FedRAMP, Common Criteria, ATO package development, and cybersecurity compliance (STIGs)
• Experience with using and deploying Tenable Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Microsoft Windows Server, Red Hat Enterprise Linux and Ubuntu Linux
• Experience with scripting and automation with PowerShell, Python, Bash and Ansible

Responsibilities

• Design, implement, and maintain enterprise security architecture per NIST RMF and DoD STIGs
• Perform SDLC security engineering including accreditation support
• Manage vulnerabilities with Nessus, ACAS, Qualys
• Integrate cybersecurity into Windows/Linux servers, cloud, and containers
• Support incident response and forensics using Splunk
• Develop automation scripts in PowerShell, Bash, Python
• Collaborate with admins and ISSOs to remediate findings and baselines
• Create security docs, architecture diagrams, SOPs, and risk reports

Skills

Security engineering

Cybersecurity

Scripting

Team collaboration

Education

BS/BA required

MS/MA not required

No degree with experience

Tools

Nessus

CyberArk

Trellix

Splunk Enterprise

VMware vSphere

GitLab

Windows Server

RHEL

Ubuntu Linux

Job description

Role

Jr Information System Security Engineer (ISSE) – Annapolis Junction, MD

Responsibilities

• Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policies.
• Perform security engineering activities across the system development lifecycle (SDLC), including requirements analysis, system design reviews, security testing, and accreditation support.
• Implement vulnerability management processes utilizing Tenable Nessus, ACAS, and Qualys to identify, assess, and remediate system vulnerabilities.
• Integrate cybersecurity requirements into Windows and Linux server environments, cloud infrastructure, virtualization platforms, and containerized applications.
• Support incident response and forensic investigations by analyzing security logs, SIEM alerts, network traffic, and endpoint telemetry using Splunk Enterprise.
• Develop automation scripts using PowerShell, Bash, and Python to streamline vulnerability remediation, account auditing, compliance reporting, and security monitoring tasks.
• Collaborate with system administrators, network engineers, ISSOs, and application teams to remediate security findings and implement secure configuration baselines.
• Perform security impact analysis for system changes, software deployments, and infrastructure upgrades to ensure continued compliance and operational security.
• Engineer endpoint protection and hardening solutions utilizing Trellix ePO - On-prem, host-based firewalls, and application whitelisting technologies.
• Evaluate and implement cybersecurity tools and technologies to improve system security posture, continuous monitoring, and threat detection capabilities.
• Produce technical security documentation, architecture diagrams, standard operating procedures (SOPs), and executive-level risk assessment reports.
• Experience administering, configuring, and troubleshooting core CyberArk modules (EPV, PVWA, CPM, PSM).
• Monitor, analyze, and detect cyber events and incidents within information systems and networks under general supervision.
• Assist with integrated, dynamic cyber defense, coordinate and maintain security toolsets to support continuous monitoring and ongoing authorization programs.
• Establish a framework by which cyber risk can be measured and quantified in the marketplace.
• Determine security requirements by evaluating business strategies, researching information security standards, conducting system security and vulnerability analyses and risk assessments, studying architecture and integration issues, and preparing cost estimates.
• Implement security systems by specifying intrusion detection methodologies and equipment; directing installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; and completing documentation.
• Verify security systems by developing and implementing test scripts.
• Maintain security by monitoring and ensuring compliance with standards, policies, and procedures; conducting incident response analyses; and developing training programs.
• Design, development, implementation, and integration of a DoD IA architecture for use within computing, network, and enclave environments.
• Ensure that the architecture and design of development and operational systems are functional and secure, including program of record systems and special purpose processing nodes with platform IT interconnectivity.

Qualifications

• 2 years with BS/BA; 0 years with MS/MA; 6 years with no degree
• Must possess an active Top Secret with SCI Eligibility
• Must be DoD 8570.1-M/8140 IAT Level III certification (Security+, CASP, GCIH, CISA, CISSP) compliant
• Experience with networking (TCP/IP, firewalls, VPNs), cloud security (AWS/Azure), Kubernetes, and DevSecOps
• Understanding of NIST SP 800-161, NIST RMF, FedRAMP, Common Criteria, ATO package development, and cybersecurity compliance (STIGs)
• Experience with using and deploying Tenable Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Microsoft Windows Server, Red Hat Enterprise Linux and Ubuntu Linux
• Experience with scripting and automation with PowerShell, Python, Bash and Ansible

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world\'s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can\'t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we\'re keeping people around the world safe and secure.

Target Salary Range

$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to the scope and responsibilities of the position, the individual\'s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.