Senior Information Security Engineer – DevSecOps RMF Expert

Peraton; Linthicum (MD); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton in Maryland seeks a cybersecurity professional to support the ISSO with log review and analysis using SIEM tools, conduct vulnerability analysis of ACAS scans, and ensure STIG‑compliant solutions. The role emphasizes DevSecOps practices to weave security into development and operations.

You will lead the technical aspects of internal security audits, coordinate with system leads and program managers, and develop security controls across computer systems and networks.

Qualifications

• Bachelor’s degree and 8+ years of security experience or a Master’s with 6+ years, or 3 years with a PhD.
• Active Top Secret clearance with SCI eligibility.
• IAT Level II certification (CompTIA Security+ preferred).
• Experience guiding developers on security policy and requirements.

Responsibilities

• Support the ISSO with Log Review/Analysis using SIEM tools (Splunk, etc.).
• Conduct Vulnerability Analysis and Review of ACAS scans.
• Assist with DISA STIGs implementation to STIG-compliant solutions.
• Lead DevOps/SecOps to integrate security throughout development processes.
• Coordinate security activities with system leads, ISSOs and program managers.
• Determine, design, implement, and evaluate security requirements and measures.
• Develop and implement technical solutions to address vulnerabilities.

Skills

Security requirements

Policy guidance

IAT Level II

Top Secret/SCI

RMF knowledge

DevSecOps

Vulnerability analysis

DISA STIGs

Cloud platforms

Security testing

Education

Bachelor's degree in IT/Cybersecurity

Master's degree in IT/Cybersecurity

PhD (considered with experience)

Tools

STIG Viewer

Splunk

RHEL/CentOS

DISA STIGs

AWS

Azure

Job description

Peraton in Maryland seeks a cybersecurity professional to support the ISSO with log review and analysis using SIEM tools, conduct vulnerability analysis of ACAS scans, and ensure STIG‑compliant solutions. The role emphasizes DevSecOps practices to weave security into development and operations.

You will lead the technical aspects of internal security audits, coordinate with system leads and program managers, and develop security controls across computer systems and networks.