Senior Cybersecurity Engineer — RMF/NIST for NAS Systems

Peraton; Herndon (VA); Hybrid; USD 112,000 - 179,000; Full time

Job summary

Peraton is seeking a Senior Cybersecurity Engineer in Herndon, VA, to provide cradle-to-grave cybersecurity engineering for mission-critical systems under the BNATCS contract. You will work across engineering disciplines to ensure requirements are implemented, verified, and sustained throughout the lifecycle.

This 100% on-site role requires RMF/NIST SP 800-53 experience, SSP development, and strong collaboration with systems, software, and networks teams to mitigate cybersecurity risks.

Qualifications

• U.S. Citizenship is required.
• Ability to obtain/maintain a Public Trust clearance.
• Educational path with varied experience levels is acceptable per the job requirements.

Responsibilities

• Provide cybersecurity engineering across the full system lifecycle.
• Develop and maintain cybersecurity requirements, architectures, and verification.
• Prepare SSPs, RMF artifacts, security controls, POA&Ms, and evidence of authorization.
• Apply NIST SP 800-53 RMF and applicable FAA cybersecurity requirements.
• Conduct architecture reviews, risk assessments, and remediation verification.
• Coordinate with cross-functional teams to manage vulnerabilities and changes.
• Communicate cybersecurity risks and recommended mitigations to leadership.

Skills

U.S. Citizenship

Public Trust clearance

Systems engineering

Security engineering

Education

Bachelor’s degree

Master’s degree

Associate’s degree

Tools

RMF

NIST SP 800-53

SSP development

POA&Ms

Security testing

Zero Trust

Certification (CISSP/CISM)

Job description

Peraton is seeking a Senior Cybersecurity Engineer in Herndon, VA, to provide cradle-to-grave cybersecurity engineering for mission-critical systems under the BNATCS contract. You will work across engineering disciplines to ensure requirements are implemented, verified, and sustained throughout the lifecycle.

This 100% on-site role requires RMF/NIST SP 800-53 experience, SSP development, and strong collaboration with systems, software, and networks teams to mitigate cybersecurity risks.