Cyber IT Specialist, 3rd Shift (CSTS) / Interim Secret

Peraton•Beltsville, MD

2d•$80,000 - $128,000•Onsite

About The Position

Peraton is seeking a Cyber IT Specialist, 3rd Shift (CSTS) to join their Federal Strategic Cyber Group. This role is based in Beltsville, MD, and operates on a 3rd shift from 10:00 PM to 6:00 AM. The specialist will be responsible for ensuring seamless operations through effective information pass-down, meticulous documentation of shift activities, and proactive monitoring of systems and personnel. This position requires a strong understanding of IT operations, cybersecurity support, and the ability to manage incidents and service requests using enterprise tools like ServiceNow and Splunk. The role also involves participating in incident response, disaster recovery, and supporting asset management activities.

Requirements

A Bachelor’s degree and 5 years of experience. An additional 4 years of experience may be substituted in lieu of the degree requirement.
Demonstrated 3+ years of experience in IT operations, network operations, or cybersecurity support role.
Must either possess and maintain, or obtain prior to start date, one of the following professional certifications: CISSP-ISSAP; CISSP-ISSEP; CISSP; Security+ CE; CySA+; PPDA; Agile IC; SNOW App Dev
Experience with ServiceNow or similar ITSM tools for incident and request management.
Familiarity with monitoring tools such as Splunk, SolarWinds, or similar platforms.
Understanding of incident response processes, including severity classification and escalation procedures.
Strong analytical and troubleshooting skills with the ability to operate in a fast-paced environment.
Strong communication skills with the ability to provide clear and timely updates.
U.S. Citizenship required.
The ability to obtain an interim Secret security clearance before start date.
The ability to obtain a final Top Secret security clearance.

Responsibilities

Ensure successful pass down of information to the oncoming shift to maintain seamless operations and continuity.
Complete Task List Reports, clearly documenting all shift activities, incidents, and operational events.
Monitor personnel activity, alerts, and DSCTS-Operations mailboxes to ensure timely communication and response to operational needs.
Monitor Splunk dashboards, SolarWinds, and other enterprise tools, and promptly notify the Shift Lead of identified issues.
Oversee the performance and security of monitoring tools to maintain system functionality and data integrity.
Create, update, and audit ServiceNow tickets (incidents, service tasks, and requests) to ensure accurate tracking, documentation, and resolution.
Perform initial triage, troubleshooting, and resolution of incidents and service requests to restore normal operations.
Document troubleshooting steps, actions taken, and service restoration details within ServiceNow for accurate record-keeping and knowledge sharing.
Verify incident resolution with end users and ensure proper ticket closure and documentation.
Escalate unresolved or complex incidents to appropriate teams (e.g., System Administration, NSS, or external vendors).
Initiate and coordinate Major Incident Response Plan (MIRP) activities, including bridge line setup, stakeholder notifications, and incident tracking.
Coordinate with cross-functional teams to troubleshoot and resolve outages, minimizing operational disruption.
Maintain and utilize escalation paths, call lists, and contact rosters to ensure rapid engagement of supporting teams.
Conduct investigations and diagnosis of outages, incidents, and service requests using enterprise tools, vendor resources, and open-source research.
Perform trend analysis to identify recurring issues and support proactive problem resolution.
Conduct root cause analysis in coordination with responsible teams and support updates to documentation and process improvements.
Create and submit knowledge articles to support continuous improvement and knowledge transfer.
Participate in disaster recovery processes to support business continuity during major system failures.
Perform quality checks on tickets, reports, and deliverables to ensure accuracy, completeness, and proper categorization prior to submission.
Support asset management activities, including receiving, inventorying, and tracking hardware shipments at BIMC (SA-26).
Coordinate and facilitate shipment of hardware components (e.g., RAM, PSUs, HDDs) to CONUS & OCONUS sites, ensuring proper documentation and accountability.