Senior ISSE — RMF & Security Controls Lead

Peraton; Washington (District of Columbia); On-site; USD 146,000 - 234,000; Full time

Benefits offered by this job

Benefits package

Discretionary bonus

Job summary

Peraton is seeking an Information Systems Security Engineer - Security Control Assessor (SCA) to support Federal Strategic Cyber programs in Washington, DC. In this role, you will assess security controls, review documentation, coordinate with system owners and ISSOs, and drive continuous monitoring and risk-based decision making across the lifecycle.

You will serve as a principal technical advisor on cybersecurity, assist in risk analysis, incident response, and audit support, and help ensure

Qualifications

• Bachelor's degree and 8 years of experience in secure design, analysis, and test of information security systems and products.
• Must meet DoD 8140.03 Advanced proficiency aligned to Security Control Assessor (Work Role 612).
• Must have a CISSP or CEH and 1 of the following certifications: CCNP Enterprise, CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, GDSA, GICSP OR advanced degree as listed.
• Active TS/SCI security clearance is required with the ability to obtain a polygraph.

Responsibilities

• Assess security controls for accuracy and evidence.
• Review system documentation and accept / reject documents.
• Coordinate with System Owner, ISSE, and ISSO to fix items.
• Continuously monitor systems across ISSM portfolio.
• Oversee Prepare step, defining roles and risk management strategies.
• Guide system categorization based on impact and regulatory requirements.
• Advise on security controls selection, tailoring, and documentation.
• Oversee implementation of controls across lifecycles with focus on quality.
• Plan and document security control assessments to validate safeguards.
• Prepare risk management documentation for system authorization.
• Direct ongoing monitoring and assessment activities with metrics.
• Serve as principal technical advisor on cybersecurity, risk analysis, incident response, and audit support.
• Foster security awareness and provide guidance and training.
• Track, report, and communicate status and risks to leadership.
• Maintain knowledge of RMF, NIST guidance, and industry best practices.

Skills

Security controls assessment

RMF/NIST

Security analysis

Cybersecurity risk analysis

Education

Bachelor's degree

Advanced degree in CS/Cybersecurity/DS/IS/IT/SE

Job description

Peraton is seeking an Information Systems Security Engineer - Security Control Assessor (SCA) to support Federal Strategic Cyber programs in Washington, DC. In this role, you will assess security controls, review documentation, coordinate with system owners and ISSOs, and drive continuous monitoring and risk-based decision making across the lifecycle.

You will serve as a principal technical advisor on cybersecurity, assist in risk analysis, incident response, and audit support, and help ensure