Information Systems Security Engineer (ISSE)
Peraton
Responsibilities Peraton is seeking an Information Systems Security Engineer (ISSE) to support our customer onsite in Washington D.C. Responsibilities include:
- Design, implement, and maintain enterprise security architectures aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policies.
- Perform security engineering activities across system development lifecycle (SDLC), including requirements analysis, system design reviews, security testing, and accreditation support.
- Implement vulnerability management processes utilizing Tenable Nessus, ACAS, and Qualys to identify, assess, and remediate system vulnerabilities.
- Integrate cybersecurity requirements into Windows and Linux server environments, cloud infrastructure, virtualization platforms, and containerized applications.
- Support incident response and forensic investigations by analyzing security logs, SIEM alerts, network traffic, and endpoint telemetry using Splunk Enterprise.
- Develop automation scripts using PowerShell, Bash, and Python to streamline vulnerability remediation, account auditing, compliance reporting, and security monitoring tasks.
- Collaborate with system administrators, network engineers, ISSOs, and application teams to remediate security findings and implement secure configuration baselines.
- Perform security impact analysis for system changes, software deployments, and infrastructure upgrades to ensure continued compliance and operational security.
- Engineer endpoint protection and hardening solutions utilizing Trellix ePO - On-prem, host-based firewalls, and application whitelisting technologies.
- Evaluate and implemented cybersecurity tools and technologies to improve system security posture, continuous monitoring, and threat detection capabilities.
- Produce technical security documentation, architecture diagrams, standard operating procedures (SOPs), and executive-level risk assessment reports.
- Experience administrating, configuring, and troubleshooting core modules such as Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM) in CyberArk.
- 5 years with BS/BA; 3 years with MS/MA; 9 years in lieu of a BS degree may be considered.
- Must possess an active Top Secret with SCI Eligibility
- Strong background in networking (TCP/IP, firewalls, VPNs), cloud security (AWS/Azure), Kubernetes, and DevSecOps.
- Deep understanding of NIST SP 800-161, NIST RMF, FedRAMP, Common Criteria, ATO package development, and cybersecurity compliance (STIGs).
- Hands-on experience managing and deploying Tenable Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Microsoft Windows Server, Red Hat Enterprise Linux and Ubuntu Linux
- Experience with scripting and automation with Powershell, Python, Bash and Ansible
- Proven experience in leading projects and mentoring junior ISSE's.
- Present technical briefings to leadership.
- Must have a current DoD 8570.1-M IAT Level III certification (SecurityX (CASP), GCIH, CISA, CISSP)
Vacancy posted more than 2 months ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Information Systems Security Engineer (ISSE). Be the first to apply!
Related searches
- information system security engineer Washington DC
- senior telecommunications engineer Washington DC
- information systems engineer Washington DC
- telecommunication engineer Washington DC
- digital communications systems engineer Washington DC
- broadcast systems engineer Washington DC
- communications engineer Washington DC
- transmission engineer Washington DC
- information technology security engineer Washington DC
- aws cloud security engineer Washington DC
