Sr Information Systems Security Engineer (ISSE) – VRT, Advisor – TS/SCI w/poly

Peraton; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Cloud certification preferred

Job summary

Peraton in Washington, DC seeks an Information Systems Security Engineer for the Vulnerability Remediation Team to support Federal Strategic Cyber programs. You will lead vulnerability remediation across customer IT systems, coordinate RMF lifecycle activities, and provide senior cybersecurity guidance to risk management and audit efforts.

This role requires TS/SCI clearance with polygraph eligibility, DoD 8140.03 proficiency, and CISSP or CEH with a supporting certification or advanced degree,

Qualifications

• Bachelor's degree and 8 years of experience in secure design, analysis, and test of information security systems and products.
• Must meet DoD 8140.03 Advanced proficiency aligned to Security Architect or Security Control Assessor.
• Must have a CISSP or CEH and 1 of the listed certifications, or an advanced degree from the provided list.
• Active TS/SCI security clearance is required with the ability to obtain a polygraph.
• Cloud certification is preferred.

Responsibilities

• Identify, track and remediate vulnerabilities within customer information systems.
• Support responses to DOJ and IC data calls.
• Support RFIs, executive reports, and process improvement initiatives.
• Lead and supervise a team responsible for end-to-end RMF lifecycle implementation.
• Oversee Prepare step roles, responsibilities, and risk management strategies.
• Guide system categorization to align with mission impact and compliance.
• Advise on security controls selection and documentation for system categorizations.
• Oversee implementation of controls across lifecycles with focus on deliverables.
• Ensure security control assessments are planned, executed and documented.
• Prepare risk management documentation for system authorization and executive decision-making.
• Direct ongoing monitoring and continuous assessment activities with metrics.
• Serve as principal technical advisor on cybersecurity, risk analysis, incident response and audit support.
• Foster security awareness and provide guidance and training.
• Track and report status, risks, and improvements to leadership.

Skills

Secure design

Information security analysis

Security testing

DoD 8140.03 proficiency

RMF / NIST guidance

Vulnerability remediation

Education

Bachelor's degree

Master's degree - Cybersecurity

Master's degree - Computer Science

Doctorate - Cybersecurity

Doctorate - Information Security

Job description

Required Qualifications:

• Bachelor's degree and 8 years of experience in secure design, analysis, and test of information security systems and products.
• Must meet DoD 8140.03 Advanced proficiency aligned to Security Architect (Work Role 652) or Security Control Assessor (Work Role 612).
• Must have a CISSP or CEH and 1 of the following certifications
  • CCNP Enterprise, CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, GDSA, GICSP OR
  • Advanced degree from the list below:
    • Doctorate - Computer Science
    • Doctorate - Cybersecurity
    • Doctorate - Data Science
    • Doctorate - Information Systems
    • Doctorate - Information Technology
    • Doctorate - Software Engineering
    • Master of Science - Strategic Information and Cyberspace Studies (NDU CIC)
    • Masters - Computer Science
    • Masters - Cybersecurity
    • Masters - Data Science
    • Masters - Information Systems
    • Masters - Information Technology
    • Masters - Software Engineering
• Active TS/SCI security clearance is required with the ability to obtain a polygraph.

Preferred:

• Cloud certification

Peraton is seeking an Information Systems Security Engineer - Vulnerability Remediation Team (VRT) - basedto support its Federal Strategic Cyber programs.

Location: Washington, DC

In this role, you will:

• Identify, track and remediate vulnerabilities within customer information systems
• Support responses to all Department of Justice (DOJ) and Intelligence Community (IC) data calls.
• Support Requests for Information (RFIs), executive-level reports, and process improvement initiatives.
• Lead, mentor, and supervise a team of contractor security professionals responsible for the end-to-end implementation of the RMF lifecycle for customer IT systems.
• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, risk appetite, and compliance requirements.
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
• Prepare risk management documentation for system authorization and executive decision-making.
• Direct ongoing monitoring and continuous assessment activities, collecting metrics to adjust security strategies and ensure sustained compliance.
• Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.
• Foster a culture of security awareness, providing technical guidance and training to both team members and stakeholders.
• Track, report, and communicate status, risks, and improvement opportunities related to security engineering activities to leadership and stakeholders.
• Maintain up-to-date knowledge of RMF, NIST guidance, and industry best practices in support of continuous process improvement.