Information Assurance and Security Engineer

Responsibilities

Peraton is seeking a seasoned Information Assurance and Security Engineer to serve as an Information System Security Officer (ISSO) for a cloud-hosted, Azure-based system. The ideal candidate brings deep security expertise, strong stakeholder communication skills, and hands-on experience supporting Agile software development teams delivering mission critical solutions within DHS or other Federal environments.
This position is remote.
Day to Day Roles and Responsibilities:

- Provide technical and programmatic information assurance support to internal and external customers for network and information security systems.

- Design, develop, and implement security requirements across enterprise and program-level business processes.

- Prepare documentation and security artifacts based on customer input and industry standard guidelines (e.g., NIST RMF, DHS 4300A). Lead certification and accreditation activities for the program.

- Develop and maintain security test and evaluation plans and contingency plans.

- Conduct risk and vulnerability assessments and prepare formal reports and recommendations.

- Analyze existing policies and procedures for compliance with Federal laws, regulations, and standards; recommend remediation strategies to close security gaps.

- Recommend system enhancements to address identified deficiencies and improve the overall security posture.

- Design, test, and integrate computer and network security tools; secure system configurations and ensure compliant deployments.

- Perform system scans, interpret results, and support system administrators in resolving findings.

- Conduct internal security program audits and develop mitigation strategies to address identified risks.

- Provide technical guidance for secure architecture design supporting evolving mission needs.

- Support security incident investigations, root-cause analysis, and response.

- Perform vulnerability assessments and develop, document, and track corrective action plans.

Qualifications
Basic Qualifications:

- Bachelors degree and 8 years of experience or a Masters degree and 6 years of experience or an Associates degree and 10 year of experience or a High School diploma/equivalent and 12 years of experience.

- Must be a U.S. Citizen with the ability to obtain and maintain a DHS Public Trust clearance.

- Demonstrated experience performing Information System Security Officer (ISSO) duties in a Federal or regulated environment, including creating and maintaining RMF documentation, SSPs, POA&Ms, security test plans, and continuous monitoring artifacts.

- Proven experience supporting software development teams delivering Azure-based cloud solutions, including familiarity with Azure AD, App Services, Key Vault, App Gateway/WAF, and cloud-native security controls.

- Hands-on experience identifying, tracking, and managing security vulnerabilities, including interpreting scan results (e.g., Tenable/Nessus, Microsoft Defender) and working with engineering teams on mitigation strategies.

- Strong understanding of NIST 800-53, 800-30, 800-37, and 800-171 frameworks.

- Active CISSP certification, or the ability to obtain within 6 months of hire.

- Strong communication skills, including developing briefing materials, presenting technical concepts to nontechnical stakeholders, and supporting customer engagements.

Preferred Qualifications:

- Working knowledge of DHS security policies, controls, and compliance requirements, including DHS 4300A/B, 4300A Sensitive System Handbook, and associated RMF processes.

- Knowledge of Azure security architecture patterns such as Zero Trust, RBAC, network segmentation, PIM/PIM, and least-privilege design.

- Strong understanding of Agile methodologies and successful collaboration within cross-functional Agile teams, including participation in sprint planning, backlog refinement, and security-focused reviews.

- Experience with security automation and DevSecOps workflows (e.g., Gi