Information System Security Manager

Peraton•Silver Spring, MD

4d•$112,000 - $179,000•Onsite

About The Position

Peraton is seeking an Information System Security Manager to support Peraton Labs’ information assurance and information technology operations. This is a full-time, on-site position based in the Silver Spring, Maryland office. The role leads information assurance efforts and systems across multiple environments and performs ISSM duties under applicable regulations, including DAAG, JSIG, and ICD-503. It manages Risk Management Framework (RMF) documentation and authorization artifacts, continuous monitoring, security controls, vulnerability remediation, and security requirements throughout the information system lifecycle. The position also oversees classified Linux and Microsoft systems, supports technical efforts as needed, and coordinates with stakeholders, system owners, users, and customers to maintain security and accreditation requirements. The role requires an active TS clearance with the ability to obtain SCI, a CISSP or equivalent certification at DoDM 8140.03 IAM Level III, and relevant experience with authorization and assessment processes. Peraton describes itself as a national security company and mission capability integrator serving government agencies and the U.S. armed forces. The stated target salary range is $112,000–$179,000; employees may be eligible for overtime, shift differential, and a discretionary bonus, depending on the position.

Requirements

At least 8 years of experience with a BS/BA, or at least 6 years with an MS/MA; an additional 4 years of experience may be considered in lieu of a degree.
CISSP or equivalent certification at DoDM 8140.03 IAM Level III.
Experience with SAP and/or DCSA assessments and authorizations.
At least 5 years of experience with the ATO process, continuous monitoring, POA&Ms, Security Authorizations, NIST 800-37, NIST 800-53 Rev. 4/Rev. 5, and working with Information System Owners and Program Managers.
Experience with SCAP, STIGs, and other compliance tools.
Strong written and verbal communication skills and ability to work well with team members.
Active TS clearance with the ability to obtain SCI.

Nice To Haves

A technical degree, such as computer science, cybersecurity, or information technology.
Experience with Ongoing Authorizations.
Experience with eMASS.
Experience with ACAS, Nessus, and/or other vulnerability scanners.
At least 3 years of Linux system administration experience, particularly with Ubuntu and Red Hat distributions.
Experience writing new Linux shell scripts and troubleshooting existing code.
In-depth knowledge of TCP/IP and networking concepts, including services such as DHCP, DNS, SSH, TLS, and IPsec.
Experience conducting risk assessments and creating Risk Assessment Reports.
Involvement in or knowledge of assisting with incident response activities and coordination.

Responsibilities

Lead and manage information assurance efforts and systems across numerous environments in Silver Spring, Maryland.
Perform ISSM roles and responsibilities as prescribed by the DAAG, JSIG, ICD-503, and other applicable regulations.
Create, manage, and maintain RMF package documentation, submissions, and artifacts, including A&A packages, ASA packages, and SCRs.
Prepare, deliver, and update required documentation using approved templates, forms, regulations, and methods.
Meet continuous monitoring requirements, including weekly auditing, backups, antivirus updates, OS patching, vulnerability scanning, and other prescribed tasks.
Manage security vulnerabilities, implement timely remediation, monitor security logs for violations and anomalous events, and report information security concerns and problems when necessary.
Generate POA&Ms for non-compliant controls and manage them throughout each information system’s lifecycle, ensuring documentation is filed and updated as required.
Oversee the management and maintenance of Linux and Microsoft classified information systems and assist with technical work such as building systems, installing software, and troubleshooting information systems and network devices.
Apply security controls based on DoD Security Technical Implementation Guidance and other customer requirements.
Work with stakeholders to identify additional applicable controls and maintain a favorable security posture.
Assist with incident response, annual self-inspections, and inventory efforts.
Track deployment of applicable software and hardware to classified environments.
Provide, track, and report security requirements throughout the lifecycle of systems within the accreditation boundary.
Provide timely and detailed responses to user and customer requests.
Maintain a thorough understanding of corporate policies, security control plans, system configurations and architecture, installed software, accounts, data flows, ports, protocols, and other relevant information for each information system.
Maintain required certifications for the role.
Ensure Configuration Control Board system reviews are scheduled and communicate issues and updates to the Information System Owner.
Ensure cybersecurity self-inspections are conducted annually.