Senior Cybersecurity Engineer

Responsibilities

Peraton is seeking a Senior Cybersecurity Engineer to design, evaluate, and validate security architecture across the enterprise and program environments in support of Peraton’s Brand New Air Traffic Control System (BNATCS) contract. This role translates cybersecurity risk and requirements into secure designs, produces actionable architecture artifacts, validates implementations through review and testing, and ensures security controls are effective and support operational outcomes. The ideal candidate will need to work across technical teams, handle ambiguity, and drive designs from concept to a securely implemented reality.

Day to Day responsibilities:

• Work closely under the supervision of the BNATCS CISO, in conjunction with the Governance Risk and Compliance (GRC) team, other system engineers, architects, and security personnel within the Peraton National Airspace Sector (NAS) to secure information systems
• With a "prove the control works" mindset, validate information system control measures are fully documented as implemented, operating as intended, and produce the desired results
• Produce clear security artifacts including architecture diagrams, data flows, threat models, control mappings, validation plans, etc
• Apply strong written and verbal communication skills, contribute to and recommend decisions, standards, and actionable remediation guidance which may be developed into sector-wide cybersecurity policy documentation, SOPs, and best practices
• Review potential information system changes for security impact while ensuring process and compliance requirements are properly addressed
• Support internal and external audits by preparing information system artifacts and responding to auditor information requests
• Assist with incident reporting and security event coordination
• Collaborate with cross-functional teams to integrate cybersecurity requirements into operational processes
• Work cross-functionally, manage ambiguity, and drive outcomes in a collaborative environment

Qualifications

Minimum Qualifications:

• Minimum of 8+ years of experience with a BS, 6+ years with a MS, or 4+ years with a PhD in Information Technology, Cybersecurity, Computer Science, or related IT field. Four (4) additional years of experience may be accepted in lieu of a Bachelors, for a total of 12+ years
• Must possess a minimum of 4+ years of experience in an Information System Security Engineering (or similar) role supporting government information systems
• Strong experience working with Federal Information Processing (FIPS), FISMA, FedRAMP and other cybersecurity related laws, regulations, and directives.
• Strong understanding of:
  • Network security concepts- segmentation, firewalls, routing/switching, DNS/DHCP, TLS, VPN/remote access, proxy, NAC/802.1x basics
  • Identity and access fundamentals- authN/authZ, SSO, MFA, RBAC/ABAC concepts, service accounts
• Experience with the concepts of Zero Trust Architecture (ZTA), Multi-Factor Authentication (MFA), Public Key Infrastructure (PKI) and the MITRE ATT&CK framework
• Familiarity with vulnerability management concepts (e.g., scan interpretation, prioritization, remediation validation)
• Ability to work cross-functionally, manage ambiguity, and drive outcomes in a collaborative environment
• Strong written communication skills toward producing decisions, standards, and actionable remediation guidance
• Possess one (or more) of the following professional certifications: CISSP, CCSP, GSEC, and/or CASP+/SecurityX
• US Citizenship with the ability to obtain/maintain an FAA Public Trust
• Candidates must be local to and willing to work on-site out of our Herndon/Chantilly, VA or Bowie, MD locations; Occasional travel to Peraton and customer facilities in the National Capital Region may be required

Preferred Qualifications:

• In-depth knowledge of National Institute of Science (NIST) Special Publications (SP) 800-53 Rev 5, 800-171 Rev 2, 800-37 Rev 2 and 800-131
• In-depth knowledge of FAA’s Security Policy 1370.121B, FAA Order 1600.75, and comprehension with DOT and FAA cybersecurity policies
• Have demonstrable experience with cybersecurity tools such as, but not limited to, Zscaler, Nessus, Prisma Cloud Compute, CrowdStrike, WIZ, Splunk, and Dynatrace
• Familiarity with containers and orchestration security (Docker/Kubernetes)
• Experience with secure SDLC patterns, CI/CD security, SAST/FAST, secrets management, API security, WAF, and thread modeling for applications
• Hands-on integration/exposure to: SIEM, SOAR, EDR, CSPM, IAM/PAM, DLP, email security, vu