Cyber IT Specialist

Peraton•Beltsville, MD

2d•$66,000 - $106,000•Onsite

About The Position

Peraton is hiring a Cyber IT Specialist for its Federal Strategic Cyber Group in Beltsville, Maryland. The role supports 24/7/365 enterprise cybersecurity operations across OpenNet, ClassNet, DMZ, NEN/DIN, Microsoft Azure Government, Government Community Cloud, and Google Workspace environments. The position monitors mission-critical infrastructure and security platforms, maintains operational continuity, and supports incident management, troubleshooting, vulnerability management, endpoint security, identity and access management, and cybersecurity analytics. The Cyber IT Specialist works across Windows, Linux, VMware, and Nutanix environments and coordinates with system owners, security staff, enterprise scanning personnel, and technical resources. The role also maintains asset and compliance records, contributes to root cause and trend analysis, prepares operational reports and briefings, and supports disaster recovery, change management, quality assurance, and hardware asset coordination. The schedule is Tuesday through Saturday, with hours to be determined.

Requirements

Bachelor’s degree and one year of experience; an additional four years of experience may substitute for the bachelor’s degree requirement.
Must possess and maintain, or obtain before the start date, one of the following certifications: CCNA Security, CEH, CISSP, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.
Exposure to or coursework in monitoring tools such as Splunk or SolarWinds.
Basic familiarity with ServiceNow or a similar ITSM platform for incident and request management.
Understanding of incident response fundamentals, including severity classification and escalation procedures.
Working knowledge of Windows operating systems; Linux exposure is a plus.
Strong analytical and troubleshooting skills and willingness to learn.
Strong written and verbal communication skills, with the ability to provide clear, timely updates.
U.S. citizenship required.
Must be able to obtain an interim Secret security clearance before the start date and a final Top Secret security clearance.

Nice To Haves

Familiarity with VMware or Nutanix virtualization environments.
Exposure to cloud platforms such as Microsoft Azure Government or Government Community Cloud.
Basic awareness of FISMA compliance frameworks or federal IT security requirements.
Familiarity with IAM or privileged access management concepts and tools such as CyberArk or Okta.
Familiarity with vulnerability management tools such as Tenable Nessus or Tenable Exposure Management.
A+, ITIL Foundation, or equivalent entry-level certification.

Responsibilities

Support 24/7/365 cybersecurity operations across the listed enterprise and cloud environments.
Monitor infrastructure and security platforms, including Splunk, SolarWinds, Microsoft Defender for Endpoint, Zeek/Bro, and Suricata.
Maintain operational continuity through shift turnovers, Task List Reports, mailbox monitoring, and communications about incidents, changes, and outstanding activities.
Create and manage ServiceNow incidents, service requests, and operational tasks; perform triage, troubleshooting, escalation, resolution verification, and documentation in accordance with procedures and SLAs.
Troubleshoot enterprise infrastructure, applications, and virtual machines across Windows, Linux, VMware, and Nutanix environments, coordinating resources to restore services.
Coordinate Major Incident Response Plan activities, including incident bridge setup, stakeholder notifications, technical escalations, and cross-functional troubleshooting.
Support vulnerability management activities using Tenable Exposure Management, including scanning coordination, remediation, asset validation, and compliance tracking across FISMA authorization boundaries.
Collaborate with System Owners, Information System Security Officers, and Enterprise Scanning personnel to resolve asset discrepancies, address findings, and maintain FISMA compliance records.
Maintain asset inventories, Tenable scanning documentation, and FISMA boundary records using Microsoft Excel and ServiceNow.
Use Databricks in Microsoft Azure Government to query security datasets and support cybersecurity analytics, trend analysis, and reporting.
Support Microsoft Defender for Endpoint deployment, configuration, and troubleshooting across Windows and Linux while maintaining Splunk log collection and monitoring.
Support IAM operations using ServiceNow, CyberArk, ARS, PHUB, and Okta, including account provisioning, privileged access requests, and CAC/PIV authentication.
Investigate recurring incidents, perform trend analysis, and contribute to root cause analysis and corrective actions.
Prepare operational reports and briefings for government and contractor leadership on infrastructure health, incidents, risks, and service restoration; communicate Priority 1 and Priority 2 incidents in accordance with SLAs.
Support disaster recovery, change management, quality assurance, and hardware asset coordination, including equipment inventory and shipments to CONUS and OCONUS locations.