Senior Cybersecurity & Compliance Engineer (TS/SCI)

Peraton; Chantilly, Northern (VA, KY); Hybrid; USD 112,000 - 179,000; Full time

Job summary

Peraton seeks Cybersecurity / Compliance Engineers to implement and sustain security controls, RMF authorization evidence, continuous monitoring, and vulnerability management across enterprise environments. You will collaborate with platform, cloud, DevSecOps, IAM, and observability teams to embed security into engineering and operations, aligning with RMF and common-control requirements.

The role combines technical security engineering with authorization, compliance, and continuous-monitoring

Qualifications

• Active TS/SCI clearance with CI Polygraph.
• Approximately 6–10 years of experience in cybersecurity, ISSE, RMF, security compliance, or security engineering.
• 6 years of experience with a BS/BA; 9 years of experience may be considered in lieu of a degree.
• Experience supporting RMF, security authorization, and continuous-monitoring activities.
• Experience implementing, assessing, or documenting technical security controls.
• Working knowledge of cloud security, DevSecOps, identity and access management, network security, and vulnerability management.
• Experience developing authorization packages, security evidence, assessment documentation, or continuous-monitoring artifacts.
• Strong technical writing, documentation, and communication skills.

Responsibilities

• Support RMF, security assessment, authorization, and continuous-monitoring activities for enterprise services and environments.
• Maintain security evidence, control implementation information, POA&M inputs, and authorization documentation.
• Assess and document security impacts of platform, infrastructure, application, and software changes.
• Support common-control and inherited-control documentation and implementation activities.
• Coordinate with security, engineering, and operational stakeholders to address control gaps and authorization requirements.
• Define and review security requirements for cloud, Kubernetes, CI/CD, identity, network, and application services.
• Integrate security validation and evidence collection into engineering and software-delivery workflows.
• Support vulnerability scanning, vulnerability triage, remediation tracking, and risk-acceptance processes.
• Support implementation of Zero Trust, RBAC/ABAC, encryption, secrets management, logging, and workload-security requirements.
• Evaluate technical implementations against established security requirements and identify risks or deficiencies.
• Collaborate with engineering teams to develop practical approaches for implementing and sustaining security controls.
• Support security reviews of COTS, GOTS, FOSS, software artifacts, containers, and third-party dependencies.
• Coordinate security evidence and documentation requirements for software/infrastructure changes.
• Support software supply-chain security, artifact integrity, provenance, and dependency-management practices.
• Partner with DevSecOps and engineering teams to integrate security controls into development and delivery processes.
• Identify security risks associated with software components and recommend mitigation/remediation actions.
• Monitor changes to enterprise systems and evaluate impacts to security controls and authorization requirements.

Skills

RMF

Security compliance

Continuous monitoring

Cloud security

DevSecOps

Identity and access management

Vulnerability management

Kubernetes security

Education

BS/BA degree

Tools

ServiceNow RMF workflow

Kubernetes tooling

Job description

Peraton seeks Cybersecurity / Compliance Engineers to implement and sustain security controls, RMF authorization evidence, continuous monitoring, and vulnerability management across enterprise environments. You will collaborate with platform, cloud, DevSecOps, IAM, and observability teams to embed security into engineering and operations, aligning with RMF and common-control requirements.

The role combines technical security engineering with authorization, compliance, and continuous-monitoring