Blue Team Infrastructure Analyst

Peraton•Arlington, VA

2d•Onsite

About The Position

Peraton is hiring a Blue Team Engineer / Infrastructure Analyst for its Department of State Diplomatic Security Cyber Mission (DSCM) program. The program provides cyber and technology security expertise to support innovative, effective, and secure business processes. The position is located in Rosslyn, Virginia. The analyst supports enterprise security assessments, recommends technical mitigations, and coordinates remediation of findings. The role uses SIEM and SOAR platforms to track vulnerabilities and misconfigurations, assesses cloud systems across major vendors and service models, and communicates recommendations to system owners and other responsible parties. The analyst also develops and tests tools and services, refines findings to reduce false positives, applies zero-trust architecture principles across on-premises and cloud environments, and collaborates with internal and external stakeholders.

Requirements

Bachelor’s degree and 5 years of experience; alternatively, 3 years of experience with a master’s degree, 0 years with a Ph.D., or four additional years of experience in lieu of the degree requirement.
Possess and maintain, or be able to obtain before the start date, a listed professional certification: CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+ PPD, Agile IC, or SNOW App Dev Pro.
Proficiency using SIEM platforms such as Splunk.
Proficiency using Endpoint Detection & Response tools such as Tanium and Microsoft Defender for Endpoint.
Proficiency using the ServiceNow SOAR platform.
Understanding of cloud-native portals such as Azure Security Center or AWS Security Hub to identify misconfigurations and security issues.
Ability to communicate across media, build stakeholder relationships, and achieve mission objectives.
U.S. citizenship required.
Active Secret security clearance required.
Ability to obtain a Top Secret security clearance.

Nice To Haves

CCNA or Network+ certification.
Knowledge of and experience with security subsystems such as firewalls, VPN servers, and IDS/IPS.
Working knowledge of network technologies.
Working knowledge of Kusto Query Language (KQL).
Knowledge of network device configurations.
Familiarity with the MITRE ATT&CK Framework.
Ability to solve network-related problems using diagnostic techniques and protocols.
Familiarity with backbone and wide area networking (WAN) components, wiring infrastructures, VPNs, Layer 2 and 3 networking protocols, multicast, firewalls, DHCP, DNS, IP address management, and network monitoring software.
Familiarity with the Zero-Trust Architecture (ZTA) framework.

Responsibilities

Assess systems and provide technical recommendations using a variety of tools.
Coordinate remediation of security findings.
Use multiple SIEM platforms and SOAR to track vulnerabilities and misconfigurations and coordinate with relevant teams to determine exposure and remediation.
Help ensure the security of cloud systems across major vendors, including IaaS, PaaS, and SaaS offerings.
Communicate cybersecurity recommendations to system owners and other responsible parties, and track and verify remediation efforts.
Develop and test new tools and services for use on customer networks, then refine findings to eliminate false positives.
Apply a zero-trust architecture framework to on-premises, standalone, and cloud IaaS, PaaS, and SaaS systems.
Build working relationships with team members, office colleagues, and external stakeholders while respecting their needs and requirements.

Benefits

Medical, dental, and vision benefits.
Life insurance.
Health savings account.
Short- and long-term disability.
Employee assistance program (EAP).
Parental leave.
401(k).
Paid time off (PTO) for vacation.
Company-paid holidays.
Employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.