Peraton is seeking a Senior Information Systems Security Engineer to perform Security Control Assessor (SCA) activities supporting a federal enterprise cybersecurity program. The role focuses on security engineering, control assessments, audit readiness, and GRC support across systems operating at multiple classification levels, including cloud and SaaS, from an onsite location in Washington, DC.
Role Overview
In this position, you will evaluate the accuracy and supporting evidence for security controls, coordinate remediation efforts with system and security stakeholders, and help ensure assessment outcomes are planned, executed, and documented in alignment with RMF and NIST guidance. You will also support authorization-related risk management documentation and ongoing monitoring activities across the ISSM portfolio to maintain compliance quality throughout the SAA lifecycle.
Key Responsibilities
- Assess security controls for accuracy and the adequacy of evidence
- Review system documentation and accept or reject relevant documents
- Coordinate with the System Owner, ISSE, and ISSO to address findings and items requiring rework
- Support continuous monitoring of systems across the ISSM portfolio to maintain quality throughout the SAA lifecycle
- Oversee activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are defined and maintained
- Guide system categorization to ensure appropriate classification based on mission and business impact and regulatory requirements
- Advise on the selection, tailoring, and documentation of security controls aligned to system categorizations, risk appetite, and compliance requirements
- Oversee implementation of technical, operational, and management controls across system and application lifecycles, with emphasis on deliverable quality and completeness
- Ensure security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards
- Prepare risk management documentation for system authorization and executive decision-making
- Direct ongoing monitoring and continuous assessment activities, including collection of metrics to adjust security strategies and sustain compliance
- Serve as a principal technical advisor on cybersecurity for risk analysis, incident response, system remediation, and audit support
- Provide technical guidance and training to team members and stakeholders to support security awareness
- Track and communicate status, risks, and improvement opportunities related to security engineering activities to leadership and stakeholders
- Maintain current knowledge of RMF, NIST guidance, and industry best practices to support continuous process improvement
Required Qualifications
- Top Secret security clearance upon hire. Candidate must be eligible to obtain or maintain a TS/SCI clearance and successfully complete a polygraph examination if required by the customer; must be a U.S. Citizen
- Minimum 8 years each of: (1) secure design, analysis, and test; (2) methods and standards for safeguard implementation; (3) creating or updating security test plans
- Must meet applicable DoD 8140.03 qualification requirements for Work Role 612 Security Control Assessor, Advanced Proficiency level, through at least one of the following certifications:
- CCISO - Certified Chief Information Security Officer
- CISA - Certified Information Systems Auditor
- CISM - Certified Information Security Manager
- CISSP - Certified Information Systems Security Professional
- CISSP-ISSEP - Certified Information Systems Security Professional - Information Systems Security Engineer
Education
Master's degree or higher in Computer Science, Cybersecurity, Information Technology, Information Systems, or Software Engineering (as specified in the posting).
Location
Washington, DC (onsite)
Salary Range
USD 135,000 - 216,000 per year
Benefits
- Medical
- Dental
- Vision
- Life
- Health savings account
- Short-term and long-term disability
- EAP
- Parental leave
- 401(k)
- Paid time off (PTO) for vacation
- Company paid holidays
Application Notes
- Estimated application period: 30 days from the job posting date
- During review, you may be required to participate in an on-camera interview
- You may be required to participate in a process to verify your identity
- Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization
- All interview responses must be the candidate’s own
