Senior ISSM – RMF & Compliance Lead

Peraton; Silver Spring (MD); On-site; USD 140,000 - 200,000; Full time

Job summary

Peraton is seeking an Information System Security Manager to lead information assurance efforts in its Silver Spring, MD offices. This full-time, on-site role involves applying RMF controls, coordinating with ISO/PM, and preparing documentation for A&A packages, SCRs, and POA&Ms.

You will oversee Linux and Windows environments, perform continuous monitoring, and drive security with DoD STIGs, ACAS/Nessus scanning, and risk remediation across multiple programs.

Qualifications

• Minimum qualifications are defined with 8 years with BS/BA; 6 years with MS/MA; 3 years with PhD, and a DoD 8570 IAM Level III equivalent.
• Active TS clearance with ability to obtain SCI.
• Experience with SAP and/or DCSA assessments and authorizations.
• Experience with RMF, NIST 800-37/800-53 Rev4/Rev5, and coordination with ISO/PM.

Responsibilities

• Lead and manage information assurance efforts across Silver Spring, MD environments.
• Perform ISSM roles as prescribed by applicable regulations.
• Create and maintain RMF package documentation and artifacts.
• Prepare and update documentation using approved templates and regulations.
• Meet continuous monitoring requirements including backups, patching, and vulnerability scanning.
• Track and remediate security vulnerabilities and report security concerns.
• Oversee Linux and Microsoft classified systems maintenance and deployment.

Skills

CISSP certification

DCSA assessments

ATO process

SCAP/STIGs

Communication skills

TS clearance

Education

Bachelor's degree in Computer Science/Cybersecurity/Information Technology

Tools

ACAS

Nessus

eMASS

SCAP

Job description

Peraton is seeking an Information System Security Manager to lead information assurance efforts in its Silver Spring, MD offices. This full-time, on-site role involves applying RMF controls, coordinating with ISO/PM, and preparing documentation for A&A packages, SCRs, and POA&Ms.

You will oversee Linux and Windows environments, perform continuous monitoring, and drive security with DoD STIGs, ACAS/Nessus scanning, and risk remediation across multiple programs.