Proficient in SIEM platforms like Splunk and Endpoint Detection & Response tools such as Tanium and Microsoft Defender.
Experience with ServiceNow SOAR platform and cloud security tools like Azure Security Center or AWS Security Hub.
Strong communication skills to build relationships with stakeholders and achieve mission objectives.
U.S. citizenship and an active Secret security clearance required, with the ability to obtain a Top Secret clearance.
Responsibilities
Assist in assessing systems and providing technical recommendations while coordinating remediation efforts.
Leverage SIEM platforms and SOAR to track vulnerabilities and misconfigurations for remediation.
Ensure security across various cloud systems, including IaaS, PaaS, and SaaS offerings.
Communicate cybersecurity recommendations to system owners and track their remediation efforts.
Develop and test new tools for applicability on customer networks, refining findings to reduce false positives.
Apply a zero-trust architecture framework to various system types, including on-premises and cloud.
Build relationships within the team and with external stakeholders to effectively complete the mission.
Benefits
Comprehensive health and wellness programs.
Opportunities for professional development and certifications.
Flexible work arrangements to support work-life balance.
Collaborative and inclusive work environment.
Access to cutting-edge technology and resources.
Full Job Description
Responsibilities
Peraton is currently seeking to hire a Blue Team Senior Engineer / Infrastructure Subject Matter Expert to become part of Peraton's Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes.
Location: Rosslyn, VA
What You'll Do:
Assist with enterprise efforts on to assess systems, provide technical recommendations using a variety of tools, and coordinate remediation of findings.
Leverage multiple SIEM platforms and SOAR to ensure tracking and coordinate with relevant teams to determine exposure to vulnerabilities and misconfigurations, and to get them remediated.
Ensure security of all types of cloud systems from various major vendors, including Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service offerings in use.
Communicate cybersecurity recommendations to responsible parties such as system owners and engaging in both tracking and verification of their remediation efforts.
Develop and test new tools and services as they become available for applicability of findings on customer networks and later refining those findings to eliminate false positive results.
Apply a zero-trust architecture framework to on-premises, standalone, and cloud IaaS, PaaS and SaaS system types
Build working relationships, within the team, office, and with external stakeholders to effectively complete the mission, while acknowledging and respecting stakeholder needs and requirements.
Qualifications
Required:
Bachelor's a degree and 5 years of experience; 3 Years with Masters; 0 Years with PhD. An additional four (4) additional years of experience may be substituted in lieu of the degree requirement.
Possess and maintain, or be able to obtain before start date, the following professional certification:
CISSP-ISSAP
CISSP-ISSEP
CISSP
Security+ CE
CySA+
PPD
Agile IC
SNOW App Dev
Proficient in SIEM platform usage, such as Splunk.
Proficient in the use of Endpoint Detection & Response tools, such as Tanium and Microsoft Defender for Endpoint.
Proficient in the use of the ServiceNow SOAR platform.
Understanding with cloud native portals such as Azure Security Center or AWS Security Hub to identify misconfigurations and security issues.
Competent in communicating across all media to build relationships with stakeholders and achieve mission objectives.
U.S. citizenship required
Active Secret security clearance
Ability to obtain a Top Secret security clearance
Preferred Qualifications:
CCNA or NET+ certification.
Knowledge of and experience with security subsystems (e.g. firewalls, VPN servers, IDS/IPS, etc.) is preferred.
Working knowledge of network technologies.
Working knowledge of Kusto Query Language (KQL).
Knowledge of Network Device configurations.
Familiarity with the MITRE ATT&CK Framework
The ability to solve network-related problems by using diagnostic techniques and protocols.
Familiarity with backbone and Wide Area networking (WAN) components, wiring infrastructures, VPNs, Layer 2 and 3 networking protocols, multicast, firewalls, DHCP, DNS, IP address management and network monitoring software is preferred.
Familiarity with Zero-Trust Architecture (ZTA) framework.
Target Salary Range
$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
