Principal Information Security Consultant

Peraton Labs, Inc.; California; On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton Labs is seeking a Principal Information Security Consultant in California to serve as the senior technical authority for secure architecture and engineering across cloud and on‑prem environments. You will translate NIST SP 800-53 Rev.

5, ARC‑AMPE, and IRS Publication 1075 requirements into concrete configurations and automated controls. You will lead security engineering across IAM, network, endpoint, cloud, and application security, review assessments and reports, and mentor security

Qualifications

• Bachelor’s degree in computer science, engineering, or cybersecurity; extensive security experience may substitute.
• Strong background interpreting NIST 800-53 Rev.5 controls in complex environments.
• Hands-on architecture and engineering across cloud and on‑premises environments.

Responsibilities

• Own secure architecture; design and review secure architectures and patterns.
• Translate security controls into concrete engineering configurations and hardening.
• Lead security engineering across IAM, network, endpoint, cloud, and app security.
• Direct vulnerability management with strategy, prioritization, and remediations.
• Assess control gaps; develop remediation strategies and support CMS ATC readiness.
• Provide QA and mentorship for security assessments, policies, and artifacts.
• Advise on incident response, detection, and post-incident analyses.

Skills

CISSP

NIST SP 800-53 Rev.5

Cloud security

Vulnerability management

Security architecture

Education

BS/BA in CS/Engineering/Cybersecurity

MS/MA in CS/Engineering/Cybersecurity

Tools

Tenable

Qualys

CIS Benchmarks

DISA STIGs

Job description

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About The Role

• Position Is Contingent Upon Award**

Peraton Labs is hiring a Principal Information Security Consultant to be the senior technical authority and trusted advisor for secure architecture and engineering across the Covered California and CalHEERS environments. You will translate NIST SP 800-53 Rev. 5, ARC-AMPE, and IRS Publication 1075 requirements into practical technical designs and operating controls, and you will provide the senior technical review that our security deliverables pass through before they reach the client.

You will work with Covered California's security leadership, cloud and infrastructure engineers, application teams, and project delivery teams, alongside a small senior Peraton security team. The goal is to raise the real, measured security posture of a cloud-based health benefit exchange that processes PII, PHI, and federal tax information - not merely to document it.

What You Will Do In This Role

• Own secure architecture. Design and review secure architectures, technical designs, security patterns, and proposed solutions across cloud and on-premises environments; identify risks and recommend proportionate controls.
• Translate controls into engineering. Interpret and apply NIST SP 800-53 Rev. 5 security and privacy controls, ARC-AMPE requirements, and IRS Publication 1075 safeguards as concrete technical configurations, hardening standards, and automated controls.
• Lead security engineering across domains. Provide technical leadership for identity and access management, network security, endpoint security, cloud security, and application security, including CSP-native tooling and configuration review.
• Direct vulnerability management technically. Own scanning strategy, risk-based prioritization, hardening baselines (CIS Benchmarks and DISA STIGs), and validation that remediation actually closed the exposure.
• Evaluate and close control gaps. Assess controls, identify gaps and weaknesses, develop risk-based remediation strategies, and advise stakeholders on corrective action; support security authorization activities including CMS Authority to Connect readiness.
• Provide senior technical QA and mentorship. Review security assessments, reports, policies, standards, and artifacts for technical accuracy and defensibility; mentor security professionals and provide technical leadership across multidisciplinary initiatives.
• Advise on incident response and detection. Support investigation, evidence handling, escalation, reporting, and post-incident analysis; support threat detection, log monitoring, third-party risk assessment, data protection, and security control automation; participate in the on-call incident response rotation.

Qualifications

Required

• Minimum of 12 years experience with BS/BA; Minimum of 10 years with MS/MA. Degree in computer science, engineering, or cybersecurity. An additional 4 years of experience may be considered in lieu of a degree.
• Progressively responsible cybersecurity experience, with significant depth in enterprise security control frameworks and complex regulated environments.
• Active CISSP certification.
• Demonstrated experience interpreting and applying NIST SP 800-53 Rev. 5 security and privacy controls within a complex enterprise environment, and translating regulatory control requirements into engineering solutions.
• Hands-on security architecture and engineering experience across cloud (AWS, Azure, or GCP) and on-premises environments, including identity and access management, network security, endpoint security, and application security.
• Hands-on experience with enterprise vulnerability management tooling (for example Tenable or Qualys) and with hardening standards such as CIS Benchmarks or DISA STIGs.
• Demonstrated ability to communicate complex cybersecurity risk to both technical and executive audiences, and executive-grade technical writing ability.
• US Citizenship and the abillity to pass a California criminal background clearance (Gov. Code
• 1043 / 10 CCR
• 6456) before starting work or accessing any confidential information, PII, PHI, federal tax information, or financial information.

Desired

• CCSP, or a cloud security specialty certification: AWS Certified Security - Specialty, Microsoft Azure SC-100, or Google Professional Cloud Security Engineer.
• CISM, CRISC, CGRC, or GSLC.
• Experience with ARC-AMPE security and privacy requirements.
• Experience with IRS Publication 1075 and FTI-bearing environments.
• Experience with CMS security requirements and the Authority to Connect (ATC) process.
• Experience with zero-trust architecture, encryption and key management design, and security control automation.
• Experience securing or assessing healthcare eligibility and enrollment, Medicaid, or health benefit exchange systems, and large California state government IT or cyber environments.
• Experience supporting independent assessments and developing or reviewing Security Assessment Reports, CMS Security Assessment Workbooks (SAWs), and POA&Ms.

Details

Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO

Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.