Security Tools Engineer ( Scanning)

: Peraton Overview Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our employees do the can't be done, solving the most daunting challenges facing our customers. Responsibilities We are Hiring! Our Dept.of Education Porgram is looking to add a Security Tools Engineer to the team. This qulified individual will be under general supervision and supports the Account Security Officer and other Account Security team personnel in Information Assurance and Security activities for the client. Operate vulnerability assessment equipment in support of vulnerability and compliance initiatives. Work with the Security Team to refine current processes and procedures and suggest and implement any new processes that will assist with fulfilling the mission of the current client contract. Act as the point of contact and subject matter expert for vulnerability scanning/assessment activities. Work with SOC counterparts to coordinate CDM and other scanning activities. What you will do:

• Prepares vulnerability and compliance reporting, analyzes system impact, updates stakeholders on progress of system hardening efforts
• Leads security compliance checklist efforts for system components
• Assists in development and implementation of technical security policies
• Provides security analysis and consultation services for product, system, and network architecture designs pertaining to vulnerability management tools
• Maintains up to date knowledge of IP network architectures
• Identifies trends and root causes of system vulnerabilities and configuration settings
• Provides risk analysis as required for projects or as necessary with recommended configuration changes
• Ensures vulnerability and compliance scanning procedures meet security requirements
• Initiates compliance and vulnerability scans using Nessus Security Center tool for configuration and vulnerability management
• Defines and updates the Security Configuration Management (SCM) baselines to meet DISA STIG requirements at least semi-annually
• Performs any other Information Security duties as assigned
• Provides consultation to technical subject matter experts (SMEs) in information security support to including assisting with evidence gathering, preparing technical narratives, and conducting training
• Works with SOC counterparts to coordinate CDM and other scanning activities
• Ensures program deliverables are met with regard to vulnerability scan reports and SLA requirements.

Specifically, the Security Tools Engineer conducts the following :

• Weekly vulnerability scans using Tenable.sc and Fortify WebInspect
• BOD 18-01 scans and monthly SLA reporting - CyberScope Report
• Ad Hoc scanning for OSA - Tenable and Fortify WebInspect
• Customer scan requests for Nessus and Fortify WebInspect - Remedy work orders
• Monthly Nessus reports for Discovery scans and Certificate info
• CDM scanning for databases within the General Support System (GSS)
• Monthly Nipper scans/analysis of network device configuration

Qualifications Required Qualifications:

• Bachelor's Degreeand a minimum of 5 years of experience. Additional years of experience may be accepted in lieu of the degree.
• 5+ years' experience in IT security
• Experience working with compliance and regulatory program requirements especially FISMA regulated environments
• Experience analyzing network, event and security logs, and/or IDS alert logs
• Proven project management and organizational skills, specifically managing multiple concurrent projects

Technical experience in the following:

• Vulnerability scanning tools (Tenable.sc and Nessus) AWS Console
• Understanding of Microsoft Windows Server and Desktop Operating Systems Knowledge of Microsoft Active Directory
• Vulnerability and Compliance Scanning of AWS RDS, Microsoft SQL Server and Oracle, PostgreSQL Databases, Firewalls and AWS Accounts
• Basic knowledge of Red Hat Enterprise Linux (RHEL)
• Industry best practice security standards (e.g., DISA STIG, CIS, NIST, etc.)

• Must be a US Citizen.
• Must be able to obtain and maintain the required High Risk Public Trust, level 6C

Preferred Qualifications:

• Excellent analytical, problem solving, and decision-making skills, applied with a solution-focused attitude
• Active Public Trust Clearance
• Fortify experience

Benefits: At Peraton, our benefits are designed to help keep you at your best beyond the work you do with us daily. We're fully committed to the growth of our employees. From fully comprehensive medical plans to tuition reimbursement, tuition assistance, and fertility treatment, we are there to support you all the way. #LI-ET1 Target Salary Range $86,000 - $138,000. This represents the typical salary range for this position based on experience and other factors. SCA / Union / Intern Rate or Range EEO An Equal Opportunity Employer including Disability/Veteran. Our Values Benefits At Peraton, our benefits are designed to help keep you at your best beyond the work you do with us daily. We're fully committed to the growth of our employees. From fully comprehensive medical plans to tuition reimbursement, tuition assistance, and fertility treatment, we are there to support you all the way.

• Paid Time-Off and Holidays
• Retirement
• Life & Disability Insurance
• Career Development
• Tuition Assistance and Student Loan Financing
• Paid Parental Leave
• Additional Benefits
• Medical, Dental, & Vision Care