Technology Program Senior Manager

Peraton•Fort Meade, MD

3d•Onsite

About The Position

Peraton seeks a Technology Program Senior Manager to support DCDC's inspections, assessments, evaluations, validations, Defensive Cyberspace Operations-Internal Defensive Measures (DCO-IDM) missions, self-assessments, and audit regimens for the DoDIN across CONUS/OCONUS sites. This role is located at Fort Meade, MD. The manager will oversee the performance and reporting of various security-related missions, including penetration testing, and will be responsible for the team's technical, schedule, and cost performance. They will also organize and lead efforts to document and design improvement strategies for vulnerabilities and monitoring gaps in Department of War Networks, and work with the Red Cell to support or lead assessments. The position involves producing reports, conducting management briefings, providing mentoring, monitoring contract funding, and acquiring follow-on business. The role includes supervisory and developmental responsibilities, ensuring the team maintains technical competence for mission outcomes.

Requirements

12 years of experience, may have supervisory or management experience.
IAM III - must be fully qualified by qualification standards/requirements in accordance with DoDD 8140.01 and DODM 8140.03 to start on contract.
Experience with security assessment tools, including Nessus, Metasploit, or Cobalt Strike.
Well-rounded background in application, network, cloud, and system security.
Experience with conducting penetration and malicious user testing in Multiple environments, including Amazon Web Services (AWS), Azure, GCP, and, on premise systems.
Demonstrated ability to interact with key stakeholders and provide both technical and information briefing materials to a range of audiences.
Experience with DODIN Inspections certification assessments, security test and evaluations, and compliance validations of JFHQ-DODIN, DOD, and other mission partner enclaves, systems, applications, and programs that are deployed for and throughout the DOD Enterprise.
Understanding of performance and reporting on penetration testing of systems.
Experience of DODIN Inspection metrics, reporting, briefings, and reports.
Knowledge of the design, development and implementation of web-based application solutions that supports the lifecycle of all related tasks, inputs, and outputs for DODIN inspections, assessments, evaluations, validations, DCO-IDM missions, and audit regimens.
Active TS with ability to obtain/maintain SCI.
U.S. Citizenship is required.

Nice To Haves

CSSP-Manager.
Supervisory or management experience.
Industry certifications such as OSCP, GCPN, CCSP, OSWE, GPEN, GCIH, GWAPT, or GXPN.
Experience with server administration, TCP/IP networking, vulnerability identification and exploitation, vulnerability exploit code development, offensive security operation coordination and communication, vulnerability tracking and remediation, mobile testing.

Responsibilities

Oversee the performance and reporting of inspections, assessments, evaluations, validations, Defensive Cyberspace Operations-Internal Defensive Measures (DCO-IDM) missions, self-assessments, and audit regimens.
Oversee the performance and reporting on penetration testing of systems to satisfy the NIST 800-53 CA-8 security control and using methodologies that may include, NIST SP 800-115, Penetration Testing Execution Standard (PTES), and Information Systems Security Assessment Framework (ISSAF).
Responsible for the successful technical, schedule, and cost performance of the team.
Organize and lead efforts that document and design improvement strategies for discovered vulnerabilities and monitoring gaps in Department of War Networks.
Maintains aggressive efforts to achieve objectives.
Work with the Red Cell to provide support on and/or lead assessments from beginning to completion including meeting with systems owners, scoping assessments, delivery of assessment reports, briefing system owners and stake holders.
Produce reports and conduct management briefings on test activities, scenarios, results, and recommendations with personnel around the globe.
Provide mentoring and guidance to senior, mid, and staff members by creating and teaching latest techniques in ethical hacking and vulnerability analysis.
Monitor contract funding status for labor, travel, and other direct costs.
Acquires follow-on business associated with areas of responsibility and supports new business development by leading major proposals personally, or through subordinate program/project managers.
Has supervisory and developmental responsibilities -- ensures team meets and maintains technical competence to ensure mission outcomes.