Overview Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visitperaton.comto learn how we’re keeping people around the world safe and secure. Responsibilities Peraton is seeking a ISSO to support our customer onsite in Annapolis Junction, MD.Assist the Information System Security Manager (ISSM) with information assurance efforts, and systems across numerous environmentsPerform Information System Security Officer (ISSO) roles and responsibilities as prescribed by the JSIG and other applicable regulationsExecute and maintain RMF activities (e.g., control implementation oversight, evidence collection, assessment support, POA&M management, continuous monitoring)Maintain security authorization artifacts (e.g., SSP, control narratives, diagrams, inheritance/leverage controls, CM plan, incident handling plan, contingency artifacts, user/admin procedures)Operate continuous monitoring: vulnerability management, config compliance, patching coordination, scan result triage, risk acceptance, and remediation verificationReview and approve security-relevant changes through configuration/change control and validate security configurations after major upgradesSupport incident response and reporting: participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learnedEnsure least privilege/access governance: account management oversight, privileged access workflows, periodic access reviews, and audit compliance requirementsTranslate security requirements into implementation guidance that engineering teams can operationalize (clear, testable, and automatable where possible) Qualifications Required qualificationsActive Top Secret clearance with SCI eligibility5 years with BS/BA; 3 years with MS/MA; 4 additional years of experience may be considered in lieu of degreeSecurity+ or equivalent certification (DoD 8570 IAM Level II)Experience with SAP assessments and authorizations3+ years experience with Authority to Operate (ATO) process, continuous monitoring, POA&Ms, Security Authorizations (SA), NIST 800-37, NIST 800-53 Rev4/ Rev5, working with Information System Owners (ISO) and Program Managers (PM)Experience with SCAP, STIGs, and other compliance toolsProven written and verbal communication skills, and the ability to work well with team membersPreferred qualificationsExperience with SCRUM methodologiesExperience with Ongoing AuthorizationsExperience with Splunk and/or other auditing compliance toolsExperience with ACAS, Nessus, and/or other vulnerability scanners