Cyber Systems Administrator

Peraton•Suffolk, VA

1d•$80,000 - $128,000•Onsite

About The Position

Peraton is hiring a Cyber Systems Administrator for an onsite role in Suffolk, Virginia. The position performs cybersecurity assessments, supports information system security engineering duties, and helps ensure networks meet government policies and security requirements. It establishes program controls to mitigate risk and supports network certification and accreditation, including formal security testing and evaluation. The role also maintains risk assessments and audit records, reviews system audits, monitors corrective actions, and coordinates with the Defense Counterintelligence and Security Agency technical representative.

Requirements

Associate degree and 7 years of experience, bachelor's degree and 5 years of experience, or master's degree and 3 years of experience; alternatively, 9 years of experience with a high school diploma.
Experience as an Information System Security Officer (ISSO) or Information System Security Analyst (ISSA).
Active DoD Secret security clearance and U.S. citizenship.
Active DoD 8140 IAM Level 2 certification, such as Security X.
Thorough understanding of the DoD Risk Management Framework (RMF).
Understanding of security controls specified in NIST SP 800-53 Rev. 5.
Demonstrated experience designing and implementing computer security policies, procedures, plans, testing security controls, disaster recovery plans, configuration management plans, and related documentation.
Experience conducting tool assessments and configuration analysis against best practices, vendor specifications, and government security guidelines and requirements.
Experience implementing, overseeing, and maintaining system security configurations, practices, and procedures.
Experience implementing controls from NIST 800-53, RMF, and DoD Information Levels, including applying them to IT solution design and implementation to achieve an authorization to operate (ATO).
Experience with DoD security technical implementation guides (STIGs), checklists, and testing tools, including STIG Viewer, SCAP, and ACAS scanning tool.
Ability to work collaboratively in a fast-paced, dynamic environment.
Familiarity with Microsoft Office, including Visio, Excel, PowerPoint, and Project.

Nice To Haves

Familiarity with the U.S. Cyber Command Cyber Operational Readiness Assessment (CORA) process.
Experience assessing configuration changes, such as new COTS tools or web application upgrades, to the system security boundary.
Experience preparing System Security Plans and updating Plans of Actions and Milestones (POA&Ms).
Experience documenting security posture in eMASS.
Experience with cyber-related tools such as Splunk or STIG Viewer.
Knowledge of cloud-native security tools, including Endpoint Security (ENS).
Knowledge of Zero Trust principles and concepts, including C2C.
Ability to plan and conduct security authorization reviews and assurance case development for initial system and network installations.

Responsibilities

Assess networks to identify deviations from acceptable configurations, enclave policy, or local policy.
Perform passive evaluations, including compliance audits, and active evaluations, including vulnerability assessments.
Perform ISSE duties and other duties as assigned.
Establish program control processes to mitigate risks and support network certification and accreditation.
Implement government policies, including NISPOM, NIST publications, and DoD directives.
Interface with the Defense Counterintelligence and Security Agency technical representative.
Recommend process tailoring and participate in and document process activities.
Analyze established security requirements and recommend additional requirements and safeguards.
Support government-agency Security Test and Evaluation activities through preparation, test participation, results analysis, and reporting.
Review system audits periodically and monitor corrective actions until they are closed.
Ensure compliance with current cybersecurity policies, concepts, and measures.
Perform risk assessments, document results in Risk Assessment Reports, and keep assessments current throughout the system life cycle.
Ensure audit records are collected and analyzed in accordance with the system security authorization package.