Cyber Systems Engineer

<h2>Responsibilities</h2> <p>Peraton is actively seeking a <strong>Cybersecurity Engineer</strong> to support our Defense Mission and Health Solutions Sector on the Defense Travel System (DTS) program.</p> <ul> <li>Must be US Citizen and have active/current DoW Public Trust designation and Common Access Card or be able to obtain prior to starting.</li> <li>This is a remote opportunity, but you must reside in the U.S. to be considered.</li> <li>Hold current (non-expired) DoW 8140 approved Cybersecurity Certification: Security+ CE or CISSP.  </li> </ul> <p>The DTS Security Team is responsible for maintaining Authorization to Operate and compliance with DoW Cybersecurity requirements.</p> <p> </p> <p>The successful candidate will:</p> <ul> <li>Perform cybersecurity requirements analysis and security systems engineering functions necessary to integrate new cybersecurity requirements and maintain DTS’s security posture</li> <li>Serve as a liaison to the DTS Program Management Office (PMO) and customer technical SMEs for cybersecurity tool compliance.</li> <li>Coordinate the integration of new cybersecurity requirements within DTS Program Teams</li> <li>Support program application security compliance efforts, including processing Fortify and Sonatype workflows in GitLab, and managing application POA&amp;Ms in Fortify SSC for release approval</li> <li>Assist with automating STIG checklist compliance and remediation monitoring</li> <li>Utilize approved DoW AI resources to support enhanced analysis of audit log and vulnerability scan data, and automate compliance processes</li> </ul> <h2>Qualifications</h2> <p><strong>Required Qualifications:</strong></p> <ul> <li>Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D, 16 years with HS diploma. </li> <li>US Citizen</li> <li>Must have active Public Trust clearance </li> <li>Hold current (non-expired) DoW 8140 approved Cybersecurity Certification: Security+ CE or CISSP</li> <li>Excellent communication skills with a diverse technical background, ability to interface with senior technical staff in government and on the program</li> <li>Experience presenting status and compliance information to leadership</li> <li>Ability to manage positive cross-team relationships within DTS and the government</li> <li>Ability to assess and communicate potential risks to the program associated with new security requirements</li> <li>Minimum 5 years of experience performing Cybersecurity requirements analysis and Cybersecurity systems engineering in a DoW environment or similar</li> <li>Minimum 5 years of Linux systems administration experience</li> <li>Minimum 5 years of experience with Wireshark, tcpdump, packet captures, and ability to converse with Network Engineers regarding security compliance for network infrastructure (Firewalls, Load Balancers, IDS/IPS), WANs, LANs, VPNs, ports and protocols</li> <li>Minimum 5 years of experience integrating one or more of the following Cybersecurity tools into a DoW or similar operational environment: Trellix ESS, Tanium, ACAS, Nessus Network Monitor, Splunk</li> <li>Minimum 5 years of systems and network infrastructure vulnerability management experience using Nessus or ACAS</li> <li>Minimum of 5 years of experience analyzing application security vulnerabilities</li> <li>Minimum 5 years of experience with software development lifecycles, DevSecOps, and on-prem or cloud environments</li> <li>Minimum 5 years of experience completing and maintaining STIG checklists </li> <li>Basic understanding of how to read code, including Java, SQL, and shell scripts</li> <li>Background performing security requirements analysis, including translating customer security requirements to actionable program requirements</li> <li>Ability to quickly learn new technologies and processes</li> <li>Strong technical writing skills</li> <li>Experience supporting 24x7 operational environments</li> <li>Ability to support surges in workloads and meet deadlines as new compliance requirements are released by the customer</li> <li>Ability to work with minimal oversight and direction, motivated performer and ability to quickly re-prioritize tasks </li> <li>Ability to support a flexible work schedule which may include weekend and after-hours support of the operational environment</li> </ul> <p><strong>Preferred Qualifications:</strong></p> <ul> <li>Experience complying with DoW Cybersecurity requirements for ZeroTrust, E-ICAM, and Web Application Firewalls</li> <li>Experience in a Cyber Incident Response role</li> <li>Experience processing JFHQ/DCDC OPORDs and TASKORDs</li> <li>Project management experience including history of maintaining project schedules, assigning tasks, and reporting status</li> <li>Experience with RMF/NIST SP-800-53, CMMC/NIST SP 800-171, and SSAE-18/SOC-1 compliance processes</li> <li>Knowledge of AI Cyber Attack methods and mitigations</li> </ul> <h2>Peraton Overview</h2> <p>Peraton is a next-generation national securi