Cybersecurity Engineer - SME

Peraton•Herndon, VA

3d•$135,000 - $216,000•Onsite

About The Position

Peraton is hiring a Cybersecurity Engineer - SME to provide cradle-to-grave cybersecurity engineering support for mission-critical systems under the FAA’s Brand-New Air Traffic Control System (BNATCS) contract. The role supports systems throughout their lifecycle, from requirements and design through integration, testing, deployment, authorization, operations, and sustainment. The engineer works across engineering disciplines to ensure cybersecurity requirements are implemented, verified, and maintained. The position is 100% on-site, primarily in Herndon, Virginia, and supports systems critical to the safety and modernization of the National Airspace System.

Requirements

U.S. citizenship.
Ability to obtain and maintain a Public Trust clearance.
Bachelor’s degree and 12 years of experience, or Master’s degree and 10 years of experience, or Associate’s degree and 14 years of experience, or high school diploma/equivalent and 16 years of experience.
Cybersecurity engineering experience supporting complex government, aviation, defense, or other mission-critical systems.
Demonstrated experience supporting cybersecurity engineering across the system lifecycle.
Experience with RMF, SSP development, NIST SP 800-53, POA&Ms, security assessment, vulnerability management, and system authorization.
Experience translating cybersecurity requirements into system architecture, design, implementation, and verification activities.
Experience conducting cybersecurity architecture reviews, risk assessments, security testing, vulnerability analysis, and remediation.
Experience supporting networked, distributed, and high-availability systems.
Experience with Linux, Windows, network security, firewalls, routers, switches, virtualization, and enterprise infrastructure.
Experience with DevSecOps, CI/CD security, SAST/DAST, vulnerability scanning, penetration testing, or security automation.
Experience with cloud engineering.
Experience integrating COTS into government environments.

Nice To Haves

Experience supporting FAA operational systems.
Experience with cybersecurity for cloud technologies.
Ability to communicate complex cybersecurity risks and recommendations to technical, program, and customer stakeholders.
Experience with geographically distributed systems, site integration, deployment, and operational transition.
Experience with Zero Trust principles and architecture.

Responsibilities

Provide cybersecurity engineering across the system lifecycle, including requirements, design, development, integration, testing, deployment, operations, and sustainment.
Develop, maintain, allocate, and trace cybersecurity requirements through system design, implementation, and verification.
Develop and maintain System Security Plans (SSPs), RMF artifacts, security controls, POA&Ms, and authorization evidence.
Apply NIST standards, RMF, and applicable FAA and program cybersecurity requirements, memoranda, and guidance.
Conduct cybersecurity architecture and design reviews, vulnerability and risk assessments, security testing, and remediation verification.
Assess cybersecurity impacts of software releases, hardware and network changes, interfaces, patches, and configuration changes.
Support vulnerability management, continuous monitoring, security baselines, configuration and change control, and POA&M closure.
Provide cybersecurity engineering during system and site integration, testing, acceptance, deployment, and transition to operations.
Partner with systems, software, network, test, integration, and implementation teams to identify and resolve cybersecurity risks.
Communicate cybersecurity risks, impacts, and recommended solutions to engineering teams, program leadership, and customers.