Senior Security Manager

Peraton•Home, FL

3d•Remote

About The Position

Peraton is seeking a Senior Security Manager who will be responsible for managing the day-to-day security of the client contract. They will act as single points of contact for all network, and service-related matters, particularly those requiring real-time decision-making and resolution. They will serve as a senior-level engineer with the authority to direct the Contractor’s technical staff and subcontractors. They must provide 24x7x365 availability (directly or through designated backups) to manage Network Operations Center (NOC) and Security Operations Center (SOC) concerns and respond to urgent State requests. They will actively participate in contract workgroups and ensure alignment with the service’s operational objectives. This position is remote with some travel to Tallahassee, FL as needed.

Requirements

High School diploma and 12 years of experience, may have supervisory or leadership experience.
Must be a U.S. Citizen and have the ability to pass a Florida State Department background check.
Experience in operational or security engineering roles.
Experience managing SIEM platforms, security analytic tools, endpoint detection, triage, containment, and recovery.
Deep understanding of threat intelligence, DDoS mitigation, and incident response lifecycle.
Proficient in MPLS, SD-WAN, VPN, firewalls, and access control in a large-scale telecom environment.
Skilled in securing Internet gateways, centralized VPN infrastructure, public/private VRFs, and customer edge devices (CPE).
Familiarity with zero-trust architectures, network segmentation, and multi-tenant isolation.
Experience with NIST 800-53, FISMA, CJIS, FedRamp, or equivalent frameworks.

Nice To Haves

Certified Information Security Manager (CISM) – for security operations
Certified Information Systems Security Professional (CISSP) – for security operations
Certified Global Information Assurance Professional (GIAC) – for security operations
CCNP Security or equivalent – for network-level security understanding
ITIL v4 – for operational governance
SIEM Tools: Splunk, QRadar, Sentinel, LogRhythm
Firewall/IDS/IPS: Palo Alto, Cisco Firepower, Fortinet, Snort
DDoS Mitigation: Arbor, Radware, Akamai
EDR/XDR: CrowdStrike, SentinelOne, Microsoft Defender
IAM/MFA: Okta, Azure AD, Duo Security

Responsibilities

Act as a senior engineering point of contact for security-related escalations and issue resolution.
Direct Contractor staff and subcontractors in the execution of NOC or SOC-related responsibilities.
Maintain continuous availability (24/7/365) for critical support and incident response, either personally or through designated backups.
Serves as the real-time authority for all security-related escalations, investigations, and urgent State requests.
Provides 24x7x365 availability for coordinated incident response, working with NOC/SOC and executive teams.
Participate in all technical security workgroups, policy advisor boards, tabletop exercises or committees created by either Peraton or the client with stakeholders to ensure service reliability, continuity, and security compliance as it relates to the contract.
Oversee and support the implementation of network and security operations, performance monitoring, and compliance with applicable regulations.
Ensure that best practices for telecommunications service performance and security are maintained across the contract environment.
Ensures enforcement of enterprise-wide security policies, detection of anomalies, and response to threats.
Coordinates with internal security analysts, auditors, and the client’s cybersecurity leads.
End-to-End oversight of SOC operations, including real-time detection, triage, containment, and recovery.
Oversees compliance with state cybersecurity policies, vendor security clauses, and SLA-base security requirements.
Leads internal security audits, vulnerability assessments, and patch management verification.
Leads and directs SOC analysts, security engineers, subcontractors, and TIER 2/3 staff during operations and incidents.
Owns incident command during major cybersecurity events (e.g., zero-day threats, data breaches, coordinated attacks).
Translates complex security risks into business terms for clients and executive stakeholders.