Senior Information Systems Security Engineer - Security Control Assessor (SCA)

Peraton; Washington (District of Columbia); Presencial; USD 135 000 - 216 000; Tempo integral

Resumo da oferta

Peraton seeks an Information Systems Security Engineer (ISSE) – Security Control Assessors (SCA) to support an established federal enterprise cybersecurity program in Washington, DC.

The team will provide security engineering, control assessments, audit readiness, and governance, risk, and compliance (GRC) support across systems at multiple classification levels, including cloud environments and SaaS platforms.

Qualificações

• Top Secret security clearance upon hire; eligible for TS/SCI and polygraph if required; must be a US citizen.
• 8 years of experience in secure design/analysis/test.
• Meets DoD 8140.03 qualifications for Work Role 612 Security Control Assessor via listed certifications.
• Master's degree or higher in CS/Cybersecurity/IT/IS/Software Engineering or equivalent; DoD-approved training.

Responsabilidades

• Assess security controls for accuracy and evidence.
• Review system documentation and accept/reject documents.
• Coordinate with System Owner, ISSE, ISSO to fix items needing rework.
• Continuously monitor systems across ISSM portfolio for quality in SAA lifecycle.
• Prepare risk management documentation for system authorization and executive decisions.
• Direct ongoing monitoring and continuous assessment activities with metrics.

Conhecimentos

Top Secret clearance

TS/SCI eligibility

Polygraph eligibility

Formação académica

Master's degree or higher in CS / Cybersecurity / IT / IS / Software Engineering

DoD-approved training

Ferramentas

CCISO

CISA

CISM

CISSP

CISSP-ISSEP

CySA+

GSLC

GSNA

Descrição da oferta de emprego

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Responsibilities

Peraton is seeking an Information Systems Security Engineer (ISSE) – Security Control Assessors (SCA) to support an established federal enterprise cybersecurity program. The team will provide security engineering, control assessments, audit readiness, and governance, risk, and compliance (GRC) support across systems at multiple classification levels, including cloud environments and SaaS platforms.

This work is supporting an established federal enterprise cybersecurity program. The team will provide security engineering, control assessments, audit readiness, and governance, risk, and compliance (GRC) support across systems at multiple classification levels, including cloud environments and SaaS platforms.

Location: Washington, DC

• Assess security controls for accuracy and evidence
• Review system documentation and accept / reject documents
• Emphasis on coordination with System Owner, ISSE, ISSO to fix items that need rework
• Emphasis on continuously monitoring systems across ISSM portfolio to focus on quality throughout SAA lifecycle
• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, risk appetite, and compliance requirements
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards
• Prepare risk management documentation for system authorization and executive decision-making
• Direct ongoing monitoring and continuous assessment activities, collecting metrics to adjust security strategies and ensure sustained compliance
• Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts
• Foster a culture of security awareness, providing technical guidance and training to both team members and stakeholders
• Track, report, and communicate status, risks, and improvement opportunities related to security engineering activities to leadership and stakeholders
• Maintain up-to-date knowledge of RMF, NIST guidance, and industry best practices in support of continuous process improvement

#FederalCyberISaaS

Qualifications

Required Qualifications:

• Top Secret security clearance upon hire. The selected candidate must be eligible to obtain/maintain a TS/SCI clearance and successfully complete a polygraph examination if required by the customer. Must be a U.S. Citizen.

• Minimum 8 years each of: (1) secure design/analysis/test; (2) methods/standards for safeguard implementation; (3) creating/updating security test plans
• Must meet applicable DoW 8140.03 qualification requirements for Work Role 612 (Security Control Assessor), Advanced Proficiency level, through at least one of the following:
  • Certification:
    • CCISO - Certified Chief Information Security Officer
    • CISA - Certified Information Systems Auditor
    • CISM - Certified Information Security Manager
    • CISSP - Certified Information Systems Security Professional
    • CISSP-ISSEP - Certified Information Systems Security Professional - Information Systems Security Engineering Professional
    • CySA+ - CompTIA Cybersecurity Analyst plus
    • GSLC - GIAC Security Leadership Certification
    • GSNA - GIAC Systems and Network Auditor; OR
  • Education: Master's degree or higher in Computer Science, Cybersecurity, Information Technology, Information Systems, Software Engineering, or a closely related field; OR
  • Certification: Qualifying DoD-approved training

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed athttps://www.careers.peraton.com/benefits.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.