Job Description

Program Overview

About The Role

Peraton is seeking a Senior Cybersecurity Engineer to design, evaluate, and validate security architecture across the enterprise and program environments in support of Peraton’s Brand New Air Traffic Control System (BNATCS) contract. This role translates cybersecurity risk and requirements into secure designs, produces actionable architecture artifacts, validates implementations through review and testing, and ensures security controls are effective and support operational outcomes. The ideal candidate will need to work across technical teams, handle ambiguity, and drive designs from concept to a securely implemented reality.

Day to Day responsibilities:

• Work closely under the supervision of the BNATCS CISO, in conjunction with the Governance Risk and Compliance (GRC) team, other system engineers, architects, and security personnel within the Peraton National Airspace Sector (NAS) to secure information systems
• With a "prove the control works" mindset, validate information system control measures are fully documented as implemented, operating as intended, and produce the desired results
• Produce clear security artifacts including architecture diagrams, data flows, threat models, control mappings, validation plans, etc
• Apply strong written and verbal communication skills, contribute to and recommend decisions, standards, and actionable remediation guidance which may be developed into sector-wide cybersecurity policy documentation, SOPs, and best practices
• Review potential information system changes for security impact while ensuring process and compliance requirements are properly addressed
• Support internal and external audits by preparing information system artifacts and responding to auditor information requests
• Assist with incident reporting and security event coordination
• Collaborate with cross-functional teams to integrate cybersecurity requirements into operational processes
• Work cross-functionally, manage ambiguity, and drive outcomes in a collaborative environment

Qualifications

Minimum Qualifications:

• Minimum of 8+ years of experience with a BS, 6+ years with a MS, or 4+ years with a PhD in Information Technology, Cybersecurity, Computer Science, or related IT field. Four (4) additional years of experience may be accepted in lieu of a Bachelors, for a total of 12+ years
• Must possess a minimum of 4+ years of experience in an Information System Security Engineering (or similar) role supporting government information systems
• Strong experience working with Federal Information Processing (FIPS), FISMA, FedRAMP and other cybersecurity related laws, regulations, and directives.
• Strong understanding of:
  • Network security concepts- segmentation, firewalls, routing/switching, DNS/DHCP, TLS, VPN/remote access, proxy, NAC/802.1x basics
  • Identity and access fundamentals- authN/authZ, SSO, MFA, RBAC/ABAC concepts, service accounts
• Experience with the concepts of Zero Trust Architecture (ZTA), Multi-Factor Authentication (MFA), Public Key Infrastructure (PKI) and the MITRE ATT&CK framework
• Familiarity with vulnerability management concepts (e.g., scan interpretation, prioritization, remediation validation)
• Ability to work cross-functionally, manage ambiguity, and drive outcomes in a collaborative environment
• Strong written communication skills toward producing decisions, standards, and actionable remediation guidance
• Possess one (or more) of the following professional certifications: CISSP, CCSP, GSEC, and/or CASP+/SecurityX
• US Citizenship with the ability to obtain/maintain an FAA Public Trust
• Candidates must be local to and willing to work on-site out of our Herndon/Chantilly, VA or Bowie, MD locations; Occasional travel to Peraton and customer facilities in the National Capital Region may be required

Preferred Qualifications:

• In-depth knowledge of National Institute of Science (NIST) Special Publications (SP) 800-53 Rev 5, 800-171 Rev 2, 800-37 Rev 2 and 800-131
• In-depth knowledge of FAA’s Security Policy 1370.121B, FAA Order 1600.75, and comprehension with DOT and FAA cybersecurity policies
• Have demonstrable experience with cybersecurity tools such as, but not limited to, Zscaler, Nessus, Prisma Cloud Compute, CrowdStrike, WIZ, Splunk, and Dynatrace
• Familiarity with containers and orchestration security (Docker/Kubernetes)
• Experience with secure SDLC patterns, CI/CD security, SAST/FAST, secrets management, API security, WAF, and thread modeling for applications
• Hands-on integration/exposure to: SIEM, SOAR, EDR, CSPM, IAM/PAM, DLP, email security, vuln scanners, NAC
• Experience scripting for validation/automation (Python/PowerShell/Bash) and comfort querying data (KQL/Splunk, or SQL a plus)
• Experience supporting compliance-heavy or classified/regulatory environments and translating requirements into technical implementations
• History of demonstrated experience designing and/or validating security architecture and configuration across at least two of the following: network, systems, cloud, applications, and/or identity management

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at

Application Duration Statement: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. 

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Job Tags

Similar Jobs