Lead Security Analyst, Federal IT & Compliance

Peraton; United States; Hybrid; USD 86,000 - 138,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Life insurance

HSA

Disability insurance

Employee assistance program

Parental leave

401(k)

Paid time off

Job summary

Peraton is seeking a Lead Security Analyst to join our Health State and Local Sector team, driving security analysis, compliance oversight, and risk management for CMS programs. You will guide vulnerability management, develop risk mitigation strategies, and ensure adherence to FISMA, NIST RMF, and CMS ARS across Agile workflows.

The role requires strong communication with engineering, operations, and leadership, plus the ability to obtain a Public Trust clearance and reside within hybrid work

Qualifications

• Experience leading security analysis, compliance, and risk management for Federal programs.
• Strong knowledge of FISMA, NIST SP 800-53, RMF, and CMS ARS.
• Hands-on with vulnerability assessments, security scanning, and POA&M lifecycle.
• Experience supporting federal security audits, assessments, and ATO activities.
• Ability to review designs and data flows for security and compliance.
• Experience collaborating with Agile teams and integrating security into SDLC.

Responsibilities

• Lead all security analysis, compliance, and oversight activities for the Program.
• Conduct comprehensive security assessments of system architecture, data flows, interfaces, and inherited controls.
• Develop, maintain, and enforce program-wide security policies and documentation per Federal and CMS requirements.
• Manage vulnerability assessment program, including scanning, reporting, and remediation coordination.
• Develop risk mitigation strategies and address findings from scans, assessments, and audits.
• Prepare and support CMS security assessments, FISMA reviews, and ATO activities.
• Ensure security requirements are integrated into Agile development workflows.
• Review designs, user stories, and system enhancements for security impacts.
• Monitor CMS updates to keep program compliance current.
• Collaborate with engineering, operations, compliance, and leadership for secure-by-design delivery.
• Develop and deliver security awareness and compliance training.
• Maintain security dashboards and metrics for leadership.

Skills

Security analysis leadership

Compliance oversight

Risk management

Fed security standards (FISMA/NIST RMF

Vulnerability assessments

CMS/ARS familiarity

Agile security integration

Effective communication

US Citizenship

Public Trust clearance eligible

Hybrid work acceptance

Education

BS/BA in related field

MS/MA preferred

Tools

Vulnerability management tools

SIEM

Security automation

Job description

Peraton is seeking a Lead Security Analyst to join our Health State and Local Sector team, driving security analysis, compliance oversight, and risk management for CMS programs. You will guide vulnerability management, develop risk mitigation strategies, and ensure adherence to FISMA, NIST RMF, and CMS ARS across Agile workflows.

The role requires strong communication with engineering, operations, and leadership, plus the ability to obtain a Public Trust clearance and reside within hybrid work