Jr Information System Security Engineer (ISSE)

Peraton; Maryland; On-site; USD 112,000 - 179,000; Full time

Job summary

Peraton is seeking an Information Systems Security Engineer (ISSE) to support DoD IT architecture at our Annapolis Junction site. The roleDesigns, implements, and maintains enterprise security aligned with NIST RMF, STIGs, and CIS benchmarks, with hands-on vulnerability management and incident response.

The ideal candidate holds TS/SCI eligibility, DoD 8570.1-M/8140 IAT III, and has experience with Nessus, CyberArk, Splunk, and cloud security.

Qualifications

• Active Top Secret with SCI eligibility required.
• DoD 8570.1-M/8140 IAT Level III certification.
• Experience with networking, cloud security, Kubernetes, and DevSecOps.
• Proficiency with Nessus, CyberArk, Trellix, Splunk, VMware vSphere, GitLab, Windows Server, RHEL/Ubuntu.
• Scripting and automation with PowerShell, Python, Bash, Ansible.

Responsibilities

• Design, implement, and maintain secure enterprise architecture per NIST RMF and STIGs.
• Perform security engineering across SDLC with requirements analysis and reviews.
• Run vulnerability mgmt using Nessus, ACAS, Qualys; remediate findings.
• Integrate security into Windows/Linux, cloud, virtualization, containers.
• Support incident response and forensics using Splunk Enterprise.
• Develop automation scripts to streamline security tasks.
• Collaborate with admins, ISSOs, and apps teams to remediate findings.
• Perform security impact analysis for changes and deployments.
• Engineer endpoint protection with Trellix ePO; enforce baselines.
• Evaluate cybersecurity tools to improve posture and monitoring.
• Produce security docs, diagrams, SOPs, risk reports.
• Administer CyberArk EPV/PVWA/CPM/PSM.

Skills

Networking

Cloud security

Kubernetes

DevSecOps

NIST RMF

DoD STIGs

Security frameworks

Powershell

Python

Bash

Ansible

Tenable Nessus

CyberArk

Splunk Enterprise

VMware vSphere

Windows Server

Linux

Acumen with CI/CD tools

Education

BS/BA

Tools

Trellix ePO

ACAS

Qualys

PowerShell

Job description

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Program Overview

Engineering, integration, and cybersecurity support to design, build, and test enhanced services for the Department of Navy's IT architecture. Offers a wide range of roles, from cybersecurity experts to engineers specializing in systems, networks, software, and data center services.

About The Role

Peraton is seeking an Information Systems Security Engineer (ISSE) to support our customer onsite in Annapolis Junction. Responsibilities include:

• Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policies.
• Perform security engineering activities across system development lifecycle (SDLC), including requirements analysis, system design reviews, security testing, and accreditation support.
• Implement vulnerability management processes utilizing Tenable Nessus, ACAS, and Qualys to identify, assess, and remediate system vulnerabilities.
• Integrate cybersecurity requirements into Windows and Linux server environments, cloud infrastructure, virtualization platforms, and containerized applications.
• Support incident response and forensic investigations by analyzing security logs, SIEM alerts, network traffic, and endpoint telemetry using Splunk Enterprise.
• Develop automation scripts using PowerShell, Bash, and Python to streamline vulnerability remediation, account auditing, compliance reporting, and security monitoring tasks.
• Collaborate with system administrators, network engineers, ISSOs, and application teams to remediate security findings and implement secure configuration baselines.
• Perform security impact analysis for system changes, software deployments, and infrastructure upgrades to ensure continued compliance and operational security.
• Engineer endpoint protection and hardening solutions utilizing Trellix ePO - On-prem, host-based firewalls, and application whitelisting technologies.
• Evaluate and implement cybersecurity tools and technologies to improve system security posture, continuous monitoring, and threat detection capabilities.
• Produce technical security documentation, architecture diagrams, standard operating procedures (SOPs), and executive-level risk assessment reports.
• Experience administrating, configuring, and troubleshooting core modules such as Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM) in CyberArk.
• Monitors, analyzes, and detects cyber events and incidents within information systems and networks under general supervision.
• Assists with integrated, dynamic cyber defense, coordinates and maintains security toolsets to support organizations' continuous monitoring and ongoing authorization programs.
• Establishes a framework by which cyber risk can be measured and quantified in the marketplace.
• Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
• Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.
• Verifies security systems by developing and implementing test scripts.
• Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
• Responsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environments.
• Ensures that the architecture and design of development and operational systems are functional and secure.
• This includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivity.

Qualifications

• 2 years with BS/BA; 0 years with MS/MA; 6 years with no degree
• Must possess an active Top Secret with SCI Eligibility
• Must be DoD 8570.1-M/8140 IAT Level III certification (SecurityX (CASP), GCIH, CISA, CISSP) compliant
• Experience with networking (TCP/IP, firewalls, VPNs), cloud security (AWS/Azure), Kubernetes, and DevSecOps.
• Understanding of NIST SP 800-161, NIST RMF, FedRAMP, Common Criteria, ATO package development, and cybersecurity compliance (STIGs).
• Experience with using and deploying Tenable Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Microsoft Windows Server, Red Hat Enterprise Linux and Ubuntu Linux
• Experience with scripting and automation with Powershell, Python, Bash and Ansible

Details

Target Salary Range: $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.