Senior Cybersecurity Compliance Engineer (RMF/ATO)

Peraton; Northern (KY); Hybrid; USD 112,000 - 179,000; Full time

Job summary

Peraton Labs is seeking a Senior Cyber Security Engineer to establish, maintain, and mature the written compliance posture of our Agentic AI platform environment. You will own and update SSPs and related artifacts to support ATO and assessments, while coordinating evidence collection for audits and liaising with auditors and stakeholders.

The ideal candidate brings deep policy experience, strong written communication, and collaboration with platform and security engineers to reflect implemented

Qualifications

• Minimum of BS with 12+ years of experience, MS with 10+ years, or a Ph.D. with 7 years in security compliance, GRC, cybersecurity policy, or related roles.
• Deep hands-on experience authoring and maintaining System Security Plans (SSPs) aligned to NIST 800-171 and NIST 800-53.
• Demonstrated experience supporting systems through ATO efforts, formal security assessments, and/or CMMC readiness activities.
• Experience managing POA&M, coordination remediation tracking, and running structured evidence collection cycles.
• Strong background serving as a primary point of contact for auditors, assessors, and compliance stakeholders.
• Proven ability to build and maintain policy libraries, standards, and SOPs aligned to a formal control framework.
• Ability to read and interpret architecture diagrams, IaC, and technical documentation to validate control narratives reflect implemented reality.
• Working knowledge of AWS and cloud-native environments (EKS, IAM, logging, encryption, cloud security controls).
• Exceptional attention to detail with clear, auditor-ready documentation.
• US Citizenship is required for this position.

Responsibilities

• Own and maintain the written compliance posture of the Agentic AI platform.
• Author, update, and evolve SSPs and related compliance artifacts in support of ATO and assessments.
• Develop additional SSPs and documentation required to support expanding authorization needs.
• Build, organize, and maintain a comprehensive security policy and SOP library aligned to relevant control frameworks.
• Manage POA&M, including documenting gaps, tracking remediation progress, and maintaining visibility into open items.
• Coordinate and run evidence collection cycles for internal reviews, external assessments, and audit activities.
• Serve as the primary compliance point of contact for auditors, assessors, and compliance stakeholders.
• Partner with platform, cloud, and security engineers to validate narratives reflect implemented practices.
• Review architecture diagrams and IaC to ensure compliance materials are accurate and defensible.
• Help ensure consistency, traceability, and quality across all compliance documentation.
• Identify documentation gaps or control issues and drive resolution.
• Support maturation of repeatable compliance processes for audit readiness.

Skills

Policy documentation

RMF/ATO

Auditor liaison

Cloud security (AWS)

Reading architecture diagrams

Strong written communication

CMMC / FedRAMP familiarity

Education

BS degree

MS degree

PhD degree

Job description

Peraton Labs is seeking a Senior Cyber Security Engineer to establish, maintain, and mature the written compliance posture of our Agentic AI platform environment. You will own and update SSPs and related artifacts to support ATO and assessments, while coordinating evidence collection for audits and liaising with auditors and stakeholders.

The ideal candidate brings deep policy experience, strong written communication, and collaboration with platform and security engineers to reflect implemented