Cybersecurity Engineer - SME

Peraton•Herndon, VA

14h•Onsite

About The Position

Peraton is hiring a Cybersecurity Engineer - SME to provide cradle-to-grave cybersecurity engineering for mission-critical systems supporting the FAA’s Brand-New Air Traffic Control System (BNATCS). The role spans requirements, design, development, integration, testing, deployment, authorization, operations, and sustainment. The engineer will work across disciplines to ensure cybersecurity requirements are implemented, verified, and maintained throughout the system lifecycle. The position is 100% on-site, primarily in Herndon, Virginia.

Requirements

U.S. citizenship.
Ability to obtain and maintain a Public Trust clearance.
One of the following education and experience combinations: bachelor's degree and 12 years of experience; master's degree and 10 years; associate's degree and 14 years; or high school diploma/equivalent and 16 years.
Cybersecurity engineering experience supporting complex government, aviation, defense, or other mission-critical systems.
Demonstrated experience supporting cybersecurity engineering across the system lifecycle.
Experience with RMF, SSP development, NIST SP 800-53, POA&Ms, security assessments, vulnerability management, and system authorization.
Experience translating cybersecurity requirements into system architecture, design, implementation, and verification activities.
Experience conducting cybersecurity architecture reviews, risk assessments, security testing, vulnerability analysis, and remediation.
Experience supporting networked, distributed, and high-availability systems.
Experience with Linux, Windows, network security, firewalls, routers, switches, virtualization, and enterprise infrastructure.
Experience with DevSecOps, CI/CD security, SAST/DAST, vulnerability scanning, penetration testing, or security automation.
Experience with cloud engineering.
Experience integrating commercial off-the-shelf (COTS) products into government environments.

Nice To Haves

Experience supporting FAA operational systems.
Experience with cybersecurity and cloud technologies.
Ability to communicate complex cybersecurity risks and recommendations to technical, program, and customer stakeholders.
Experience with geographically distributed systems, site integration, deployment, and operational transition.
Experience with Zero Trust principles and architecture.

Responsibilities

Provide cybersecurity engineering across the full system lifecycle, including requirements, design, development, integration, testing, deployment, operations, and sustainment.
Develop, maintain, allocate, and trace cybersecurity requirements through system design, implementation, and verification.
Develop and maintain System Security Plans (SSPs), RMF artifacts, security controls, POA&Ms, and authorization evidence.
Apply NIST standards, the Risk Management Framework (RMF), and applicable FAA and program cybersecurity requirements, memoranda, and guidance.
Conduct cybersecurity architecture and design reviews, vulnerability and risk assessments, security testing, and remediation verification.
Assess cybersecurity impacts of software releases, hardware and network changes, interfaces, patches, and configuration changes.
Support vulnerability management, continuous monitoring, security baselines, configuration and change control, and POA&M closure.
Provide cybersecurity engineering during system and site integration, testing, acceptance, deployment, and transition to operations.
Partner with systems, software, network, test, integration, and implementation teams to identify and resolve cybersecurity risks.
Communicate cybersecurity risks, impacts, and recommended solutions to engineering teams, program leadership, and customers.