Cyber IT Specialist
About The Position
Peraton is seeking a Cyber IT Specialist to join its Federal Strategic Cyber Group in Beltsville, Maryland. The role supports 24/7/365 enterprise cybersecurity operations across OpenNet, ClassNet, DMZ, NEN/DIN, Microsoft Azure Government (MAG), Government Community Cloud (GCC), and Google Workspace (OOB) environments. The schedule is Tuesday through Saturday, with hours to be determined. The specialist monitors mission-critical infrastructure and security platforms, maintains operational continuity, manages and resolves ServiceNow incidents and requests, and troubleshoots enterprise systems across Windows, Linux, VMware, and Nutanix environments. The position also supports major incident response, vulnerability management, FISMA compliance and asset tracking, endpoint security, identity and access management, cybersecurity analytics, disaster recovery, change management, and operational reporting. The role requires U.S. citizenship and the ability to obtain an interim Secret clearance before starting and a final Top Secret clearance.
Requirements
- Bachelor’s degree and at least 1 year of experience; an additional 4 years of experience may substitute for the bachelor’s degree requirement.
- Must possess and maintain, or obtain before the start date, one of these certifications: CCNA Security, CEH, CISSP, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.
- Exposure to or coursework in monitoring tools such as Splunk or SolarWinds.
- Basic familiarity with ServiceNow or a similar ITSM platform for incident and request management.
- Understanding of incident response fundamentals, including severity classification and escalation procedures.
- Working knowledge of Windows operating systems; Linux exposure is a plus.
- Strong analytical and troubleshooting skills and willingness to learn.
- Strong written and verbal communication skills, including the ability to provide clear, timely updates.
- U.S. citizenship required.
- Must be able to obtain an interim Secret security clearance before the start date and a final Top Secret security clearance.
Nice To Haves
- Familiarity with VMware or Nutanix virtualization environments.
- Exposure to Microsoft Azure Government (MAG) or Government Community Cloud (GCC).
- Basic awareness of FISMA compliance frameworks or federal IT security requirements.
- Familiarity with IAM or privileged access management concepts and tools such as CyberArk or Okta.
- Familiarity with vulnerability management tools such as Tenable Nessus or Tenable Exposure Management.
- A+, ITIL Foundation, or equivalent entry-level certification.
Responsibilities
- Support 24/7/365 enterprise cybersecurity operations across OpenNet, ClassNet, DMZ, NEN/DIN, Microsoft Azure Government (MAG), Government Community Cloud (GCC), and Google Workspace (OOB) environments.
- Monitor infrastructure and security platforms, including Splunk, SolarWinds, Microsoft Defender for Endpoint (MDE), Zeek/Bro, and Suricata.
- Maintain shift turnovers, Task List Reports, mailbox monitoring, and timely communications about incidents, system changes, and outstanding operational activities.
- Create, update, and manage ServiceNow incidents, service requests, and operational tasks; perform triage, troubleshooting, escalation, resolution verification, and documentation in accordance with procedures and SLAs.
- Troubleshoot infrastructure, applications, and virtual machines across Windows, Linux, VMware, and Nutanix environments, coordinating technical resources to restore services.
- Coordinate Major Incident Response Plan (MIRP) activities, including incident bridge setup, stakeholder notifications, technical escalations, and cross-functional troubleshooting.
- Support vulnerability scanning, remediation, asset validation, and compliance tracking through Tenable Exposure Management across FISMA authorization boundaries.
- Collaborate with System Owners, Information System Security Officers, and Enterprise Scanning personnel to resolve asset discrepancies, address vulnerability findings, and maintain FISMA compliance records.
- Maintain asset inventories, Tenable scanning documentation, and FISMA boundary records using Microsoft Excel and ServiceNow.
- Use Databricks in Microsoft Azure Government to query security datasets, review operational data, and support cybersecurity analytics, trend analysis, and reporting.
- Support MDE deployment, configuration, and troubleshooting on Windows and Linux systems while maintaining Splunk log collection and monitoring.
- Support IAM operations using ServiceNow, CyberArk, ARS, PHUB, and Okta, including account provisioning, privileged access requests, and CAC/PIV authentication.
- Investigate recurring incidents, perform trend analysis, and contribute to root cause analysis to identify corrective actions and improve infrastructure reliability.
- Prepare operational reports and brief government and contractor leadership on infrastructure health, incidents, risks, and service restoration; communicate Priority 1 and Priority 2 incidents in accordance with SLAs.
- Support disaster recovery, change management, quality assurance, and hardware asset coordination, including equipment inventory and shipments to CONUS and OCONUS locations.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Health savings account
- Short- and long-term disability
- Employee assistance program (EAP)
- Parental leave
- 401(k)
- Paid time off (PTO) for vacation
- Company-paid holidays
- Employees may be eligible for overtime, shift differential, and a discretionary bonus, depending on the position.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
