Blue Team Infrastructure Analyst

Peraton•Arlington, VA

2d•$80,000 - $128,000•Onsite

About The Position

Peraton is hiring a Blue Team Engineer / Infrastructure Analyst for its Department of State Diplomatic Security Cyber Mission program. The role supports cyber and technology security work to enable innovative, effective, and secure business processes. It is located in Rosslyn, Virginia. The analyst assesses enterprise systems, provides technical recommendations, coordinates remediation of security findings, and uses SIEM and SOAR platforms to track vulnerabilities and misconfigurations. The role also supports security across cloud services, communicates recommendations to system owners, verifies remediation, evaluates new tools and services, and applies zero-trust architecture principles to on-premises, standalone, and cloud environments. Success requires building effective working relationships with internal teams and external stakeholders while respecting stakeholder needs.

Requirements

Bachelor's degree and 5 years of experience; 3 years of experience with a master's degree; or 0 years of experience with a Ph.D. An additional four years of experience may be substituted for the degree requirement.
Possess and maintain, or be able to obtain before the start date, one of the listed professional certifications: CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPD, Agile IC, or SNOW App Dev.
Proficient in SIEM platform usage, such as Splunk.
Proficient in Endpoint Detection & Response tools, such as Tanium and Microsoft Defender for Endpoint.
Proficient in the ServiceNow SOAR platform.
Understand cloud-native portals such as Azure Security Center or AWS Security Hub for identifying misconfigurations and security issues.
Competent in communicating across media to build stakeholder relationships and achieve mission objectives.
U.S. citizenship required.
Active Secret security clearance.
Ability to obtain a Top Secret security clearance.

Nice To Haves

CCNA or NET+ certification.
Knowledge of and experience with security subsystems such as firewalls, VPN servers, and IDS/IPS.
Working knowledge of network technologies.
Working knowledge of Kusto Query Language (KQL).
Knowledge of network device configurations.
Familiarity with the MITRE ATT&CK Framework.
Ability to solve network-related problems using diagnostic techniques and protocols.
Familiarity with backbone and wide area networking (WAN) components, wiring infrastructures, VPNs, Layer 2 and 3 networking protocols, multicast, firewalls, DHCP, DNS, IP address management, and network monitoring software.
Familiarity with the Zero-Trust Architecture (ZTA) framework.

Responsibilities

Assess systems, provide technical recommendations using a variety of tools, and coordinate remediation of findings.
Use SIEM platforms and SOAR to track vulnerabilities and misconfigurations, coordinate with relevant teams to determine exposure, and support remediation.
Help ensure the security of cloud systems, including Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service offerings.
Communicate cybersecurity recommendations to system owners and track and verify remediation efforts.
Develop and test new tools and services for applicability to customer networks, and refine findings to eliminate false positives.
Apply a zero-trust architecture framework to on-premises, standalone, and cloud systems.
Build working relationships with team members, office personnel, and external stakeholders to complete the mission while respecting stakeholder needs and requirements.