Information Assurance and Security Engineer

🔥 16 hours ago

🇺🇸 United States – Remote

💵 $86k - $138k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Peraton

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Peraton is a mission-focused enterprise that supports national security initiatives through advanced IT and cyber services. They provide capabilities in areas such as cyber defense, cloud operations, engineering, and intelligence. With a commitment to solving complex challenges, Peraton integrates data-driven technologies to ensure mission success for their military and government clients.

📋 Description

• Serve as an Information System Security Officer (ISSO) for a cloud-hosted, Azure-based system • Provide technical and programmatic information assurance support to internal and external customers for network and information security systems • Design, develop, and implement security requirements across enterprise and program-level business processes • Prepare documentation and security artifacts based on customer input and industry standard guidelines, including NIST RMF and DHS 4300A • Lead certification and accreditation activities for the program • Develop and maintain security test and evaluation plans and contingency plans • Conduct risk and vulnerability assessments and prepare formal reports and recommendations • Analyze policies and procedures for compliance with Federal laws, regulations, and standards; recommend remediation strategies • Recommend system enhancements to address deficiencies and improve security posture • Design, test, and integrate computer and network security tools • Secure system configurations and ensure compliant deployments • Perform system scans, interpret results, and support system administrators in resolving findings • Conduct internal security program audits and develop mitigation strategies • Provide technical guidance for secure architecture design supporting evolving mission needs • Support security incident investigations, root-cause analysis, and response • Perform vulnerability assessments and develop, document, and track corrective action plans

🎯 Requirements

• Bachelor's degree and 8 years of experience, or Master's degree and 6 years of experience, or Associate's degree and 10 years of experience, or High School diploma/equivalent and 12 years of experience • Must be a U.S. Citizen • Ability to obtain and maintain a DHS Public Trust clearance • Demonstrated experience performing Information System Security Officer (ISSO) duties in a Federal or regulated environment • Experience creating and maintaining RMF documentation, SSPs, POA&Ms, security test plans, and continuous monitoring artifacts • Experience supporting software development teams delivering Azure-based cloud solutions • Familiarity with Azure AD, App Services, Key Vault, App Gateway/WAF, and cloud-native security controls • Hands-on experience identifying, tracking, and managing security vulnerabilities • Experience interpreting scan results, such as Tenable/Nessus and Microsoft Defender • Experience working with engineering teams on mitigation strategies • Strong understanding of NIST 800-53, 800-30, 800-37, and 800-171 frameworks • Active CISSP certification, or ability to obtain it within 6 months of hire • Strong communication skills, including developing briefing materials, presenting technical concepts to nontechnical stakeholders, and supporting customer engagements • Preferred: Working knowledge of DHS security policies, controls, and compliance requirements, including DHS 4300A/B, DHS 4300A Sensitive System Handbook, and associated RMF processes • Preferred: Knowledge of Azure security architecture patterns such as Zero Trust, RBAC, network segmentation, PIM/PIM, and least-privilege design • Preferred: Strong understanding of Agile methodologies and collaboration within cross-functional Agile teams • Preferred: Experience with security automation and DevSecOps workflows, including GitHub Actions, Azure DevOps pipelines, and IaC security scanning • Preferred: Experience implementing Continuous Monitoring plans, dashboards, and automated control reporting • Preferred: Additional security certifications such as ISC2 CAP, ISC2 CCSP, CompTIA Security+, or Azure Security Engineer Associate (AZ-500)

🏖️ Benefits

• Employees may be eligible for overtime • Employees may be eligible for shift differential • Employees may be eligible for a discretionary bonus • Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law