Information Assurance and Security Engineer

🔥 6 minutes ago

🇺🇸 United States – Remote

💵 $104k - $166k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Peraton

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Peraton is a mission-focused enterprise that supports national security initiatives through advanced IT and cyber services. They provide capabilities in areas such as cyber defense, cloud operations, engineering, and intelligence. With a commitment to solving complex challenges, Peraton integrates data-driven technologies to ensure mission success for their military and government clients.

📋 Description

• Serve as an Information System Security Officer (ISSO) for a cloud-hosted, Azure-based system • Provide technical and programmatic information assurance support to internal and external customers • Design, develop, and implement security requirements across enterprise and program-level business processes • Prepare documentation and security artifacts based on customer input and industry-standard guidelines, including NIST RMF and DHS 4300A • Lead certification and accreditation activities for the program • Develop and maintain security test and evaluation plans and contingency plans • Conduct risk and vulnerability assessments and prepare formal reports and recommendations • Analyze policies and procedures for compliance with Federal laws, regulations, and standards • Recommend remediation strategies to close security gaps • Recommend system enhancements to address deficiencies and improve the security posture • Design, test, and integrate computer and network security tools • Secure system configurations and ensure compliant deployments • Perform system scans, interpret results, and support system administrators in resolving findings • Conduct internal security program audits and develop mitigation strategies • Provide technical guidance for secure architecture design supporting evolving mission needs • Support security incident investigations, root-cause analysis, and response • Develop, document, and track corrective action plans

🎯 Requirements

• Bachelor's degree and 8 years of experience, or a Master's degree and 6 years of experience, or an Associate's degree and 10 years of experience, or a High School diploma/equivalent and 12 years of experience • Must be a U.S. Citizen • Ability to obtain and maintain a DHS Public Trust clearance • Demonstrated experience performing Information System Security Officer (ISSO) duties in a Federal or regulated environment • Experience creating and maintaining RMF documentation, SSPs, POA&Ms, security test plans, and continuous monitoring artifacts • Experience supporting software development teams delivering Azure-based cloud solutions • Familiarity with Azure AD, App Services, Key Vault, App Gateway/WAF, and cloud-native security controls • Hands-on experience identifying, tracking, and managing security vulnerabilities • Experience interpreting scan results, such as Tenable/Nessus and Microsoft Defender • Strong understanding of NIST 800-53, 800-30, 800-37, and 800-171 frameworks • Active CISSP certification, or ability to obtain within 6 months of hire • Strong communication skills, including developing briefing materials and presenting technical concepts to nontechnical stakeholders • Preferred: working knowledge of DHS security policies, controls, and compliance requirements, including DHS 4300A/B and associated RMF processes • Preferred: knowledge of Azure security architecture patterns, including Zero Trust, RBAC, network segmentation, PIM/PIM, and least-privilege design • Preferred: strong understanding of Agile methodologies and collaboration within cross-functional Agile teams • Preferred: experience with security automation and DevSecOps workflows, including GitHub Actions, Azure DevOps pipelines, and IaC security scanning • Preferred: experience implementing Continuous Monitoring plans, dashboards, and automated control reporting • Preferred: additional security certifications such as ISC2 CAP, ISC2 CCSP, CompTIA Security+, or Azure Security Engineer Associate (AZ-500)

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Health savings account • Short-term disability • Long-term disability • Employee assistance program (EAP) • Parental leave • 401(k) • Paid time off (PTO) for vacation • Company-paid holidays • Potential eligibility for overtime • Potential eligibility for shift differential • Potential eligibility for a discretionary bonus