Information Assurance and Security Engineer

🕒 2 dias atrás

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $104.000 - $166.000 / ano

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🗣️🇺🇸🇬🇧 Inglês obrigatório

De onde vem esta vaga

Publicada na página de carreiras da Peraton, não em um site de vagas

Vista pela primeira vez pelo Remote Rocketship 2 dias atrás

Ainda aberta no site da Peraton. Verificada 45 minutos atrás.

Logo of Peraton

Peraton

10.000+ funcionários

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A Peraton é uma empresa focada em missões que apoia iniciativas de segurança nacional por meio de serviços avançados de TI e cibernéticos. Eles oferecem capacidades em áreas como defesa cibernética, operações em nuvem, engenharia e inteligência. Com um compromisso em resolver desafios complexos, a Peraton integra tecnologias baseadas em dados para garantir o sucesso das missões de seus clientes militares e governamentais.

Descrição

• Serve as an Information System Security Officer (ISSO) for a cloud-hosted, Azure-based system • Provide technical and programmatic information assurance support to internal and external customers • Design, develop, and implement security requirements across enterprise and program-level business processes • Prepare documentation and security artifacts based on customer input and industry-standard guidelines, including NIST RMF and DHS 4300A • Lead certification and accreditation activities for the program • Develop and maintain security test and evaluation plans and contingency plans • Conduct risk and vulnerability assessments and prepare formal reports and recommendations • Analyze policies and procedures for compliance with Federal laws, regulations, and standards • Recommend remediation strategies to close security gaps • Recommend system enhancements to address deficiencies and improve the security posture • Design, test, and integrate computer and network security tools • Secure system configurations and ensure compliant deployments • Perform system scans, interpret results, and support system administrators in resolving findings • Conduct internal security program audits and develop mitigation strategies • Provide technical guidance for secure architecture design supporting evolving mission needs • Support security incident investigations, root-cause analysis, and response • Develop, document, and track corrective action plans

🎯 Requisitos

• Bachelor's degree and 8 years of experience, or a Master's degree and 6 years of experience, or an Associate's degree and 10 years of experience, or a High School diploma/equivalent and 12 years of experience • Must be a U.S. Citizen • Ability to obtain and maintain a DHS Public Trust clearance • Demonstrated experience performing Information System Security Officer (ISSO) duties in a Federal or regulated environment • Experience creating and maintaining RMF documentation, SSPs, POA&Ms, security test plans, and continuous monitoring artifacts • Experience supporting software development teams delivering Azure-based cloud solutions • Familiarity with Azure AD, App Services, Key Vault, App Gateway/WAF, and cloud-native security controls • Hands-on experience identifying, tracking, and managing security vulnerabilities • Experience interpreting scan results, such as Tenable/Nessus and Microsoft Defender • Strong understanding of NIST 800-53, 800-30, 800-37, and 800-171 frameworks • Active CISSP certification, or ability to obtain within 6 months of hire • Strong communication skills, including developing briefing materials and presenting technical concepts to nontechnical stakeholders • Preferred: working knowledge of DHS security policies, controls, and compliance requirements, including DHS 4300A/B and associated RMF processes • Preferred: knowledge of Azure security architecture patterns, including Zero Trust, RBAC, network segmentation, PIM/PIM, and least-privilege design • Preferred: strong understanding of Agile methodologies and collaboration within cross-functional Agile teams • Preferred: experience with security automation and DevSecOps workflows, including GitHub Actions, Azure DevOps pipelines, and IaC security scanning • Preferred: experience implementing Continuous Monitoring plans, dashboards, and automated control reporting • Preferred: additional security certifications such as ISC2 CAP, ISC2 CCSP, CompTIA Security+, or Azure Security Engineer Associate (AZ-500)

🏖️ Benefícios

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Health savings account • Short-term disability • Long-term disability • Employee assistance program (EAP) • Parental leave • 401(k) • Paid time off (PTO) for vacation • Company-paid holidays • Potential eligibility for overtime • Potential eligibility for shift differential • Potential eligibility for a discretionary bonus

Candidatar-se

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Vagas Similares

🕒 2 dias atrás

CareSource

1001 - 5000

🏥 Saúde

🛡️ Seguros

⚕️ Seguro de Saúde

Information Security GRC Analyst managing cybersecurity risk, compliance, audits, and IT controls for CareSource. Advising stakeholders and regulators while leading risk mitigation and security governance programs.

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 2 dias atrás

Allstate

10.000+ funcionários

💼 Consultoria

📦 Logística

🛡️ Seguros

Cybersecurity Exposure Response Lead investigating critical vulnerabilities and coordinating remediation for Allstate’s insurance enterprise. Leading incident response, threat hunting, and analyst development in a fully remote U.S. role.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $100.000 - $170.500 / ano

💰 Post-IPO Equity em 2014-01

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

infoinfo

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 2 dias atrás

Endor Labs

11 - 50

🔐 Segurança

☁️ SaaS

🔒 Cibersegurança

Senior Security Researcher uncovering zero-day vulnerabilities in software supply chains and CI/CD systems. Translating offensive research into security capabilities for Endor Labs’ AI security platform.

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 2 dias atrás

Affirm

1001 - 5000

💳 Fintech

👥 B2C

🛍️ Comércio Eletrônico

Senior Product Security Engineer securing Affirm’s buy-now-pay-later financial products. Conducting threat modeling, code reviews, and architecture reviews across cloud-based services.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $173.000 - $233.000 / ano

💰 Post-IPO Equity em 2021-01

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

infoinfo

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 2 dias atrás

Affirm

1001 - 5000

💳 Fintech

👥 B2C

🛍️ Comércio Eletrônico

Product Security Engineer building secure CIAM authentication services for Affirm’s buy-now-pay-later platform. Developing Python or Kotlin backend APIs, MFA, and identity integrations.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $146.000 - $206.000 / ano

💰 Post-IPO Equity em 2021-01

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

infoinfo

🗣️🇺🇸🇬🇧 Inglês obrigatório

Desenvolvido por Lior Neu-ner. Adoraria receber seu feedback — entre em contato por DM ou pelo e-mail support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok