Security Manager (TX)

Peraton; Austin, Northern (TX, KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Peraton is seeking a Security Manager in the Austin, TX area to lead security policy, planning, and compliance across government IT contracts. The role requires deep expertise in TX-RAMP Level 2, FedRAMP Moderate, CJIS, and audit governance, with responsibility for incident management and risk remediation.

The candidate will manage SOC 2 Type 2 programs, coordinate with theDIR and Technical Director, and oversee vulnerability management in a multi-vendor environment. US citizenship is required.

Qualifications

• 10 years of experience in cybersecurity leadership, including supervisory roles.
• 8+ years leading cybersecurity on government IT contracts.
• TX-RAMP Level 2 or FedRAMP Moderate equivalent compliance experience required.
• Experience with TAC Chapter 202 / Texas state cybersecurity requirements.
• CJIS Security Policy compliance experience, including personnel management and data security.
• SOC 2 Type 2 audit management and corrective action experience.
• Zero-trust architecture design and implementation experience.
• Experience with security incident response, threat hunting, and SIEM management.
• Experience operating in multi-vendor government IT environments.
• Strong governance, risk, compliance, architecture, and security operations experience.
• Ability to communicate security risks and remediation activities to senior government and technical stakeholders.
• CISSP certification or CISM acceptable in lieu of CISSP; CJIS Security Addendum certification or equivalent experience.

Responsibilities

• Overall accountability for security policy, procedures, planning, evaluation, and technology.
• Track, remediate, and report on current and emerging threats to DIR.
• Coordinate with the Technical Director and DIR to address threats.
• Provide compliance oversight for TX-RAMP Level 2, TAC 202, CJIS, IRS Publication 1075, and MARS-E.
• Coordinate annual SOC 2 Type 2 audit and corrective actions.
• Track, report, and remediate security incidents per TAC Chapter 202.
• Develop the annual security plan and integrate security with GRC processes.
• Oversee vulnerability scanning and quarterly Master Security Baseline checks.
• Provide governance across a complex multi-vendor government IT environment.
• Coordinate with technical and service delivery leadership on risks and remediation.

Job description

Required Qualifications:

• 10 years of experience, may have supervisory or lead experience
• 8+ years of cybersecurity leadership experience on government IT contracts.
• TX-RAMP Level 2 or FedRAMP Moderate equivalent compliance experience — REQUIRED.
• Demonstrated experience withTAC Chapter 202 / Texas state cybersecurity requirements.
• Experience withCJIS Security Policy compliance, including:
  • Personnel management
  • Data security
• SOC 2 Type 2 audit management and corrective action experience.
• Demonstratedzero-trust architecture design and implementation experience.
• Experience with:
  • Security incident response
  • Threat hunting
  • SIEM management
• Experience operating withinmulti-vendor government IT environments.
• Strong cybersecurity governance, risk management, compliance, architecture, and security operations experience.
• Ability to communicate security risks, incidents, remediation activities, and compliance status effectively to senior government and technical stakeholders.
• CISSP certification-CISM acceptable in lieu of CISSP
• CJIS Security Addendum compliance certification or equivalent experience
• Must be a US Citizen

Peraton is hiring a Security Manager.The qualified candidate will provide security leadership across the contract, including security policy, procedures, planning, evaluation, technology, compliance, incident management, vulnerability management, and GRC. The Security Director coordinates through the Technical Director.

Candidates must be located in theAustin, TX metropolitan area, orSan Angelo, TX as applicable or willing to relocate to the Austin, TX metropolitan area.

Key Responsibilities:

• Overall accountability forsecurity policy, procedures, planning, evaluation, and technology.
• Track, remediate, and report oncurrent and emerging threats and trends to DIR.
• Work with theTechnical Director and DIRto address current and planned future threats.
• Provide compliance oversight for:
  • TX-RAMP Level 2
  • TAC 202
  • CJIS
  • IRS Publication 1075
  • MARS-E
• Coordinate theannual SOC 2 Type 2 audit.
• ManageSOC 2 Type 2 corrective action plans.
• Track, report, and remediate security incidents in accordance withTAC Chapter 202.
• Develop theannual security plan.
• Integrate security activities withGRC processes.
• Overseevulnerability scanning.
• Conductquarterly Master Security Baseline Configuration Health Checks.
• Provide security governance and accountability across a complexmulti-vendor government IT environment.
• Coordinate with technical and service delivery leadership on security risks, remediation, compliance, and emerging threats.

Security Compliance and Expertise:

The successful candidate should be able to provide leadership and oversight across:

• TX-RAMP Level 2
• FedRAMP ModerateTAC Chapter 202
• CJIS Security Policy
• IRS Publication 1075
• MARS-ESOC 2
• Type 2Zero-Trust Architecture
• SIEM / Threat HuntingSecurity
• Incident ResponseVulnerability ManagementGRC