Information Systems Security Engineer/Officer (ISSE/ISSO) / Acti

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Program Overview

Delivers configurable, scalable, and adaptable cybersecurity solutions to meet the evolving needs of the warfighting customer. This program supports a range of key roles, including specialists in information security, cyber engineering, penetration testing, and Navy validation, all working together to enhance the security and resilience of naval systems and installations.

About The Role

Peraton is seeking to hire an experienced Information Systems Security Engineer/Officer (ISSE/ISSO) - Dept. of Navy Support.

Location: On-site role in DamNeck, VA

We are currently seeking an experienced Information Systems Security Engineer/Officer (ISSE/ISSO) to provide cybersecurity support to the Department of the Navy (DON). This role includes full-spectrum Risk Management Framework (RMF) Assessment & Authorization (A&A) support, Navy Qualified Validator (NQV) activities, and continuous monitoring tasks in alignment with applicable Navy policies and instructions.

Key Responsibilities

• Provide ISSE/ISSO support for DON RMF A&A activities in accordance with Navy cybersecurity policies and instructions.
• Deliver Navy Qualified Validator (NQV) support for Authority to Operate (ATO) package submissions and RMF Step 6 continuous monitoring activities.
• Conduct security control risk assessments and validations as an NQV.
• Perform annual security reviews and annual testing of security controls (ISSO, ISSE, and NQV Level II/III).
• Manage and maintain POA&M entries to ensure vulnerabilities are properly tracked, mitigated, and resolved.
• Plan and execute cybersecurity testing to assess security controls and document compliance status.
• Evaluate the quality and effectiveness of security control implementations against RMF requirements.
• Conduct vulnerability assessments and provide risk reduction recommendations to stakeholders.

Qualifications

Minimum Requirements:

• Bachelors degree and a minimum of five (5) years of relevant experience. An additional 4 years of relevant experience will be considered in lieu of the degree requirement.
• Minimum certification: Security+ or any of the 461 (or equivalent required by the Technical Instruction) at the Intermediate level per DoDD 8140.01 or successor certifications.
• Performing Risk Management Framework (RMF) activities.
• Conducting STIG assessments, including use of SCAP benchmarks.
• Performing vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) tool.
• Using eMASS for RMF package development and maintenance.
• Developing Plans of Action and Milestones (POA&M) entries.
• Completing RMF Step 5 authorizations in an ISSE capacity.
• Communicating risk reduction strategies and recommendations to stakeholders.
• U.S. citizenship is required.
• Clearance: Active Secret security clearance with the ability to obtain a final Top Secret with SCI eligibility.
  • Must hold and maintain a final adjudicated Tier 5 security investigation with IT Level 1 designation (JPAS and/or DISS) for privileged user access.

Preferred Experience:

• STIG assessments using SCAP benchmarks and Evaluate STIG tools.
• Vulnerability assessments using ACAS.
• Applying processes and workflows in eMASS.
• Developing accurate POA&M entries.
• Supporting RMF Step 5 ISSE authorization activities.
• Providing risk-based recommendations to technical and non-technical stakeholders.

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application Duration Statement: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

EEO:Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.