Blue Team Infrastructure SME

Peraton•Arlington, VA

1d•$86,000 - $138,000•Onsite

About The Position

Peraton is currently seeking to hire a Blue Team Senior Engineer / Infrastructure Subject Matter Expert to become part of Peraton’s Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes.

Requirements

Bachelor's a degree and 5 years of experience; 3 Years with Masters; 0 Years with PhD. An additional four (4) additional years of experience may be substituted in lieu of the degree requirement.
Possess and maintain, or be able to obtain before start date, the following professional certification: CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPD, Agile IC, SNOW App Dev
Proficient in SIEM platform usage, such as Splunk.
Proficient in the use of Endpoint Detection & Response tools, such as Tanium and Microsoft Defender for Endpoint.
Proficient in the use of the ServiceNow SOAR platform.
Understanding with cloud native portals such as Azure Security Center or AWS Security Hub to identify misconfigurations and security issues.
Competent in communicating across all media to build relationships with stakeholders and achieve mission objectives.
U.S. citizenship required
Active Secret security clearance
Ability to obtain a Top Secret security clearance

Nice To Haves

CCNA or NET+ certification.
Knowledge of and experience with security subsystems (e.g. firewalls, VPN servers, IDS/IPS, etc.) is preferred.
Working knowledge of network technologies.
Working knowledge of Kusto Query Language (KQL).
Knowledge of Network Device configurations.
Familiarity with the MITRE ATT&CK Framework
The ability to solve network-related problems by using diagnostic techniques and protocols.
Familiarity with backbone and Wide Area networking (WAN) components, wiring infrastructures, VPNs, Layer 2 and 3 networking protocols, multicast, firewalls, DHCP, DNS, IP address management and network monitoring software is preferred.
Familiarity with Zero-Trust Architecture (ZTA) framework.

Responsibilities

Assist with enterprise efforts on to assess systems, provide technical recommendations using a variety of tools, and coordinate remediation of findings.
Leverage multiple SIEM platforms and SOAR to ensure tracking and coordinate with relevant teams to determine exposure to vulnerabilities and misconfigurations, and to get them remediated.
Ensure security of all types of cloud systems from various major vendors, including Infrastructure-as-a-Service, Platform-as-a-Service, and Software-as-a-Service offerings in use.
Communicate cybersecurity recommendations to responsible parties such as system owners and engaging in both tracking and verification of their remediation efforts.
Develop and test new tools and services as they become available for applicability of findings on customer networks and later refining those findings to eliminate false positive results.
Apply a zero-trust architecture framework to on-premises, standalone, and cloud IaaS, PaaS and SaaS system types
Build working relationships, within the team, office, and with external stakeholders to effectively complete the mission, while acknowledging and respecting stakeholder needs and requirements.