{"id":1117989,"url":"https://alion.io/job/peraton-information-assurance-and-security-engineer","title":"Information Assurance and Security Engineer","company":{"id":722,"name":"Peraton","domain":"peraton.com","url":"https://alion.io/company/peraton","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":10,"ghost_share":0,"stale_share":0,"repost_share":0.1,"time_to_fill_p50_days":10,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":115000,"max_usd":205000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":362},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Fortify","optional":false},{"name":"IAM","optional":false},{"name":"OWASP","optional":false},{"name":"Sonatype Nexus IQ","optional":false},{"name":"FedRAMP","optional":true},{"name":"ITSM","optional":true},{"name":"ServiceNow","optional":true},{"name":"SharePoint","optional":true}],"status":"closed","first_seen_at":"2026-09-22T17:33:15Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-22T18:17:53Z","board_verified":false,"closed_at":"2026-10-22T18:17:53Z","days_open":30,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":30},"description":"Responsibilities\nPeraton is seeking a Information Assurance and Security Engineer. The position will be responsible for the following but not limited too:\nThis position is remote\nProvide technical and programmatic information assurance services to internal and external customers in support of network and information security systems across the DEERS application portfolio.\nDesign, develop, and implement security requirements within the organization's business processes, including DevSecOps pipelines, cloud migration activities (OCI), and Agile development sprints.\nPrepare and maintain security documentation using accepted DoD and NIST guidelines, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), STIG checklists, and implementation plans within eMASS.\nPrepare Security Test and Evaluation (ST&E) plans and support execution of formal security assessments in coordination with the DMDC Cybersecurity Division (CSD) and Enterprise ISSOs.\nProvide Certification and Accreditation (C&A) / Assessment and Authorization (A&A) support, including development of security and contingency plans, in alignment with DoDI 8510.01 and NIST SP 800-37 RMF principles.\nConduct complex risk and vulnerability assessments; develop and maintain risk mitigation strategies addressing identified weaknesses across the DEERS application environment.\nAnalyze organizational policies and procedures against Federal laws and regulations - including FISMA, NIST SP 800-53 Rev 5, DoDI 8500.01, and OMB M-14-03 - and provide recommendations for closing identified compliance gaps.\nRecommend and implement system enhancements to improve security deficiencies; support IAVA (Information Assurance Vulnerability Alert) monitoring and monthly resolution activities.\nDevelop, test, and integrate computer and network security tools, including Fortify, Sonatype, and BURP scanning solutions; integrate security scanning into the DevSecOps pipeline for every production release.\nSecure system configurations and install security tools; scan systems to determine compliance against STIG and NIST SP 800-53 Rev 5 baselines; report results and evaluate products and system administration configurations.\nConduct security program audits and develop solutions to address identified risks; support 1-3 external audits annually (e.g., DHA MERHCF, DoD CIO ICOFR, FIAR).\nProvide IA support for the development and implementation of security architectures to meet new and evolving security requirements, including support for OCI cloud migration at DISA IL-4/IL-5 authorization levels.\nProvide assistance in computer incident investigations; report cyber incidents within 1 hour of discovery per DFARS 252.204-7012 and DMDC IR Team protocols, with follow-up reporting every 24 hours until closure.\nPerform vulnerability assessments including development of risk mitigation strategies; submit POA&Ms within 3 business days of Category 1 or 2 vulnerability identification and update within 10 business days of vulnerability events.\nSupport Information Security Continuous Monitoring (ISCM) activities per NIST SP 800-137/137A, DoDI 8530.01, and DoDI 8531.01, and report weekly vulnerability scan status during Integrated Progress Reviews (IPRs).\nMaintain and support the program's ATOs and A&I packages through the full RMF lifecycle - Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor.\nImplement JFHQ-DODIN and USCYBERCOM Cyberspace Tasking Orders (CTOs) as directed.\nEnsure all cybersecurity workforce personnel are identified, screened, trained, and certified in accordance with DoD 8140.03 and CMMC (DFARS 252.204-7021) requirements.\nConduct and support mandatory security training including OPSEC, CUI Handling, Insider Threat, Privacy Act/PII, IT Security Awareness, Counterintelligence, Antiterrorism Level I, and Records Management.\nQualifications\nMinimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD, 12 years with HS diploma\nAbility to obtain and maintain DOD Public Trust\nHands-on experience with the DoD Risk Management Framework (RMF) and associated tooling, specifically eMASS (Enterprise Mission Assurance Support Service).\nIn-depth knowledge of NIST SP 800-53 Rev 5, NIST SP 800-37, NIST SP 800-171 Rev 2, NIST SP 800-137, FISMA, DoDI 8510.01, and DoDI 8500.01.\nExperience conducting vulnerability assessments, developing POA&Ms, and managing the full A&A lifecycle including ATO package development.\nExperience with application security scanning tools including Fortify, Sonatype, and BURP; familiarity with OWASP secure coding practices.\nWorking knowledge of STIG compliance verification, checklist preparation, and remediation.\nDemonstrated experience supporting DevSecOps security practices within Agile development environments.\n DoD 8140.03 / DoD 8570.01-M compliant certification IAT/IAM Level II (e.g., CISSP, CASP+, CEH, Security+, or equivalent certification).\nPreferred Qualifications\nActive Public Trust clearance.\n CISSP (Certified Information Systems Security Professional) or equivalent advanced certification.\nExperience with cloud security at FedRAMP Moderate, DISA IL-4, or DISA IL-5 authorization levels; familiarity with Oracle Cloud Infrastructure (OCI) security configuration.\nFamiliarity with CMMC (Cybersecurity Maturity Model Certification) framework and compliance.\nExperience supporting external DoD financial/operational audits (FIAR, ICOFR, FISCAM).\nWorking knowledge of ServiceNow, JIRA, and SharePoint in an ITSM/project context.\nKnowledge of DFARS 252.204-7012 cyber incident reporting requirements.\nExperience implementing cyberspace tasking orders (CTOs) from JFHQ-DODIN or USCYBERCOM.\nPrior experience in the S-ISSO role within a large-scale DoD program environment\nPeraton Overview\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\nTarget Salary Range\n$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEO\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.","description_format":"text","description_chars":7272,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Information Security","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-09-22T17:33:15Z"},{"event":"close","at":"2026-10-22T18:17:53Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/peraton-information-assurance-and-security-engineer","json_url":"https://alion.io/job/peraton-information-assurance-and-security-engineer.json","meta":{"generated_at":"2026-10-22T21:45:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6479,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":722},"rest":"https://alion.io/mcp/rest/get_company?id=722"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fperaton-information-assurance-and-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fperaton-information-assurance-and-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fperaton-information-assurance-and-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/peraton-information-assurance-and-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fperaton-information-assurance-and-security-engineer"}]}