Overview Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visitperaton.comto learn how we’re keeping people around the world safe and secure. Responsibilities Peraton Labsis seeking a poly clearedInformation System Security Officerfor a mission-critical, highly complex HPC environment enabling research across multiple security domains. You will own day-to-day security operations aligned to RMF, drive continuous monitoring, maintain ATO posture, and partner closely with subcontractor and customer personnel to ensure implementation and compliance.This position requires full-time on-site work in Laurel, MD.Key responsibilities may includeAct as the ISSO supporting the system security lifecycle across development, operations, and modernizationExecute and maintain RMF activities (e.g., control implementation oversight, evidence collection, assessment support, POA&M management, continuous monitoring)Maintain security authorization artifacts (e.g., SSP, control narratives, diagrams, inheritance/leverage controls, CM plan, incident handling plan, contingency artifacts, user/admin procedures)Operate continuous monitoring: vulnerability management, config compliance, patching coordination, scan result triage, risk acceptance, and remediation verificationReview and approve security-relevant changes through configuration/change control and validate security configurations after major upgradesSupport incident response and reporting: participate in investigations, coordinate containment actions, preserve evidence, and contribute to post-incident lessons learnedEnsure least privilege/access governance: account management oversight, privileged access workflows, periodic access reviews, and audit compliance requirementsTranslate security requirements into implementation guidance that engineering teams can operationalize (clear, testable, and automatable where possible)*This position may be eligible for an increased sign-on bonus. Eligibility, bonus amount, and applicable terms and conditions will be discussed during the recruiting process*#MDFSP#PLABS26 Qualifications Required qualifications6+ years of experience and a BS in computer science, IT, or related technical discipline, MS and 4+ years of experience. Four years of additional experience is required in lieu of a Bachelors’ degree for a total of 10 years of experience4+ years of experience supporting DoD/IC or government systemsHands-on experience executing RMF tasks and maintaining authorization artifacts (SSP, POA&Ms, continuous monitoring evidence)Strong working knowledge ofNIST SP 800-53controls and how they map to technical implementations and proceduresExperience with vulnerability and configuration compliance workflowsFamiliarity with Linux-based enterprise environments and common hardening conceptsAbility to communicate risk clearly to both technical engineers and non-technical leadershipStrong documentation disciplineActive TS/SCI security clearance with a current polygraph is required.Preferred qualificationsExperience securing or assessing containerized workflows (e.g., container runtime hardening, image governance, supply chain considerations)Experience with eMASS (or comparable GRC tooling), security control inheritance models, and assessor engagement.Familiarity with vulnerability tooling and security monitoring conceptsActive certifications such as: CISSP, CISM, CAP, GSLC, Security+, CCSP, etc.Experience with data protection requirements relevant to sensitive environments#MDPM#MDFSP