Cyber Security Engineer

Peraton•,

7d•$112,000 - $179,000

About The Position

Peraton Labs is seeking a Senior Cyber Security Engineer to establish, maintain, and mature the written compliance posture of its Agentic AI platform environment. The role ensures security and compliance artifacts accurately represent the platform’s infrastructure, controls, and operational practices. The engineer owns core compliance documentation, including System Security Plans (SSPs), policies, standard operating procedures, POA&M management, and audit evidence coordination. The role supports security control implementation and end-to-end Risk Management Framework (RMF) and Authority to Operate (ATO) compliance. It works closely with platform, cloud, and security engineers to translate technical implementations into clear, accurate, auditor-ready documentation and to strengthen repeatable compliance processes and audit readiness.

Requirements

Minimum of a BS with 12+ years of experience, an MS with 10+ years of experience, or a Ph.D. with 7 years of experience in security compliance, GRC, cybersecurity policy, or related compliance-focused roles.
Deep hands-on experience authoring and maintaining System Security Plans (SSPs) aligned to NIST 800-171 and NIST 800-53.
Demonstrated experience supporting systems through ATO efforts, formal security assessments, and/or CMMC readiness activities.
Experience managing POA&Ms, coordinating remediation tracking, and running structured evidence collection cycles.
Strong background serving as a primary point of contact for auditors, assessors, and compliance stakeholders.
Proven ability to build and maintain policy libraries, standards, and SOPs aligned to a formal control framework.
Ability to interpret architecture diagrams, infrastructure-as-code, and technical documentation to validate that control narratives reflect implemented systems.
Working knowledge of AWS and cloud-native environments, including EKS, IAM, logging, encryption, and cloud security controls.
Exceptional attention to detail and ability to identify vague, conflicting, or incomplete documentation and drive clarity.
Strong written communication skills and ability to translate technical implementations into concise, auditor-ready language.
U.S. citizenship is required.

Nice To Haves

Experience supporting CMMC Level 2 preparation, assessment, or sustainment activities.
Background contributing to FedRAMP or DoD ATO packages.
Experience in highly technical cloud or platform environments where security controls are mapped directly to operational systems.
Familiarity with evidence management, control traceability, and structured documentation practices in regulated environments.
Experience collaborating closely with cloud, DevSecOps, or platform engineering teams.
Ability to work effectively where compliance maturity is actively being built and refined.

Responsibilities

Own and maintain the written compliance posture of the Agentic AI platform.
Author, update, and evolve System Security Plans (SSPs) and related compliance artifacts for ATO and other assessment efforts.
Develop additional SSPs and associated documentation to support expanding authorization needs.
Build, organize, and maintain a security policy and SOP library aligned with relevant control frameworks.
Manage POA&Ms by documenting gaps, tracking remediation progress, and maintaining visibility into open items.
Coordinate and run evidence collection cycles for internal reviews, external assessments, and audits.
Serve as the primary compliance point of contact for auditors, assessors, and compliance stakeholders.
Partner with platform, cloud, and security engineers to validate that documented control narratives accurately reflect implemented infrastructure and operational practices.
Review architecture diagrams, infrastructure-as-code, technical diagrams, and engineering documentation to keep compliance materials accurate and defensible.
Maintain consistency, traceability, and quality across compliance documentation and supporting artifacts.
Identify documentation gaps, policy inconsistencies, and control narrative issues, and drive them to resolution.
Support the development of repeatable compliance processes that improve audit readiness.