SIPR Operations Lead

Peraton • Herndon, VA

20d • $104,000 - $166,000

About The Position

We are seeking a highly skilled and innovative SIPR Operations Lead to join our team in the greater DMV area, supporting the Army National Guard.

Requirements

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD
• Clearance: Active TS/SCI clearance.
• Candidate must meet ONE of the following:
• Bachelor’s degree in Cybersecurity; OR
• Relevant DoD/military training (example: Splunk Core Certified Power User); OR
• Relevant professional certification or equivalent experience (examples: CySA+; GCIA; CEH).
• Cybersecurity, SOC, or classified network operations experience with at least 3 years supporting classified enclave operations.
• Hands‑on experience with classified monitoring toolsets, SIEM/Splunk in SIPR contexts, vulnerability scanning/validation, and RMF/ATO sustainment activities.
• Proven incident response coordination experience within secure domains and ability to advise leadership on classified risk posture and mitigation.
• Strong operational documentation skills, chain‑of‑custody handling, and capability to produce classified‑appropriate reports and metrics.

Nice To Haves

• Prior DoD/ARNG SIPR operational leadership or liaison experience.
• Familiarity with DISA/NETCOM classified policies, CCRI/inspection processes, and automation of monitoring/reporting in classified enclaves.

Responsibilities

• Direct cybersecurity operations for classified (SIPR) network environments: monitoring, incident detection/response, vulnerability remediation, and compliance management.
• Oversee implementation and validation of security controls tailored to classified domains, ensuring alignment with classified system governance and accreditation requirements.
• Coordinate cross‑functional response for high‑impact incidents in secure enclaves; advise stakeholders on containment, remediation, and risk mitigation strategies.
• Manage continuous monitoring, scanning/validation cycles, and classified reporting to support RMF/ATO sustainment and inspection readiness.
• Produce operational status reports, incident summaries, and metrics communicating classified domain posture to leadership.
• Ensure secure handling of classified telemetry, evidence, and reporting artifacts; maintain chain‑of‑custody and auditability for classified operations.
• Liaise with SOC, CIRT, NETCOM, ARCYBER, RCC‑ARNG, and other mission partners to synchronize classified‑domain activities and escalation paths.
• Maintain and refine SIPR operational playbooks, SOPs, and runbooks to ensure consistent operations and readiness.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees