On-Site ISSO: RMF Security Lead for DoD/IC

Peraton; United States; On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton Labs is seeking a poly cleared Information System Security Officer for a mission-critical HPC environment in Laurel, MD. You will own day-to-day security operations aligned to RMF and drive continuous monitoring to maintain the ATO posture.

This role requires coordinating with subcontractors and customers to ensure implementation and compliance while protecting sensitive systems and data. A TS/SCI with polygraph is required.

Qualifications

• 6+ years of IT/CS security experience with BS; MS with 4+ years additional
• 4+ years supporting DoD/IC or government systems
• RMF tasks execution and authorization artifacts (SSP, POA&Ms, continuous monitoring)
• Strong knowledge of NIST SP 800-53 controls and mappings to implementations
• Experience with vulnerability and configuration compliance workflows
• Familiarity with Linux-based enterprise environments and hardening concepts
• Ability to communicate risk clearly to engineers and leadership
• Strong documentation discipline
• Active TS/SCI with current polygraph

Responsibilities

• Act as the ISSO supporting the system security lifecycle across development, operations, and modernization
• Execute and maintain RMF activities (control implementation oversight, evidence collection, assessment support, POA&M management, continuous monitoring)
• Maintain security authorization artifacts (SSP, control narratives, diagrams, inheritance/leverage controls, CM plan, incident handling plan, contingency artifacts, user/admin procedures)
• Operate continuous monitoring: vulnerability management, config compliance, patching coordination, scan result triage, risk acceptance, remediation verification
• Review and approve security-relevant changes through configuration/change control and validate security configurations after major upgrades
• Support incident response and reporting: investigations, containment actions, preserve evidence, post-incident lessons learned
• Ensure least privilege/access governance: account management oversight, privileged access workflows, access reviews, audit compliance
• Translate security requirements into implementation guidance for engineering teams (clear, testable, automatable)

Job description

Peraton Labs is seeking a poly cleared Information System Security Officer for a mission-critical HPC environment in Laurel, MD. You will own day-to-day security operations aligned to RMF and drive continuous monitoring to maintain the ATO posture.

This role requires coordinating with subcontractors and customers to ensure implementation and compliance while protecting sensitive systems and data. A TS/SCI with polygraph is required.