Remote Information Assurance & Security Engineer

Peraton; Tampa (FL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Job summary

Peraton seeks an Information Assurance and Security Engineer to deliver IA services across the DEERS portfolio. You will design security requirements for DevSecOps pipelines and cloud migrations (OCI), and prepare DoD/NIST-compliant documentation within eMASS.

Responsibilities include RMF/A&A activities, risk assessments, security testing, and supporting external audits. This is a remote role with options for Florida-based work from home.

Qualifications

• Minimum years: 8 years with BS/BA; 6 years with MS/MA; 3 years with PhD; 12 years with HS diploma.
• Ability to obtain and maintain DOD Public Trust.
• Hands-on RMF and eMASS experience.
• Knowledge of NIST SP 800-53 Rev 5, 800-37, 800-171 Rev 2, 800-137, FISMA, DoDI 8510.01, DoDI 8500.01.
• Experience conducting vulnerability assessments, POA&Ms, and the full A&A lifecycle including ATO package development.
• Experience with Fortify, Sonatype, and BURP; familiarity with OWASP secure coding practices.
• STIG compliance verification, checklist preparation, and remediation.
• DevSecOps support within Agile development environments and IAT/IAM Level II certifications (e.g., CISSP, CASP+, CEH, Security+).

Responsibilities

• Provide IA services to internal and external customers across the DEERS portfolio.
• Design security requirements within DevSecOps pipelines and cloud migration activities (OCI).
• Prepare and maintain security documentation (SSPs, SARs, POA&Ms, STIGs) in eMASS.
• Prepare Security Test and Evaluation (ST&E) plans and support formal assessments with CSD and Enterprise ISSOs.
• Provide C&A / A&A support per DoDI 8510.01 and NIST RMF.
• Conduct complex risk and vulnerability assessments with mitigations.
• Support external audits (FIAR, ICOFR, FISCAM) and ISCM activities.

Skills

RMF experience

Vulnerability assessments

DevSecOps

Audits & compliance

Education

BS/BA

MS/MA

PhD

HS diploma

Tools

eMASS

Fortify

Sonatype

BURP

STIG tooling

Job description

Peraton seeks an Information Assurance and Security Engineer to deliver IA services across the DEERS portfolio. You will design security requirements for DevSecOps pipelines and cloud migrations (OCI), and prepare DoD/NIST-compliant documentation within eMASS.

Responsibilities include RMF/A&A activities, risk assessments, security testing, and supporting external audits. This is a remote role with options for Florida-based work from home.