Cyber Security Engineer at Peraton

Peraton is an advanced national security and technology company dedicated to supporting critical missions worldwide, including operations that extend beyond Earth’s atmosphere.

As a leading mission integrator and enterprise IT solutions provider, the company delivers specialized technologies and trusted services designed to safeguard the United States and its allies.

Operating across land, sea, air, space, and cyberspace, Peraton addresses both conventional and emerging security threats.

The company partners with major government agencies and supports all branches of the U.S. military. Its workforce tackles complex challenges every day, developing solutions that help protect people, infrastructure, and national interests around the world.

About the Role

Peraton Labs is hiring a Senior Cyber Security Engineer to establish, manage, and strengthen the documented security and compliance framework for its Agentic AI platform environment.

The successful candidate will be responsible for ensuring that security policies, compliance records, and supporting documentation accurately represent the platform’s infrastructure, implemented controls, and day-to-day operational practices.

Key responsibilities include developing and maintaining System Security Plans (SSPs), security policies, Standard Operating Procedures (SOPs), Plans of Action and Milestones (POA&Ms), and audit evidence.

The engineer will also oversee Risk Management Framework (RMF) activities and Authority to Operate (ATO) compliance from beginning to end.

This position requires someone with strong documentation, policy development, and security compliance expertise who can work effectively with platform and cybersecurity engineering teams.

The ideal candidate will translate complex technical implementations into clear, accurate, and audit-ready documentation.

The role serves as an important link between regulatory requirements, documented security controls, and the actual systems being developed and operated.

Key Responsibilities

• Take ownership of the Agentic AI platform’s documented security and compliance framework.
• Develop, maintain, and update System Security Plans (SSPs) and other compliance documents required for ATO authorization and security assessments.
• Prepare additional SSPs and supporting documentation as the platform expands its authorization requirements.
• Establish and manage a comprehensive collection of security policies, standards, and SOPs aligned with applicable control frameworks.
• Oversee POA&M activities by documenting security gaps, monitoring corrective actions, and tracking outstanding remediation tasks.
• Organize and coordinate evidence-gathering activities for internal compliance reviews, external assessments, and audits.
• Act as the main compliance contact for auditors, external assessors, and internal stakeholders.
• Collaborate with cloud, platform, and cybersecurity engineers to ensure documented security controls accurately reflect implemented systems and operational procedures.
• Examine architecture diagrams, infrastructure-as-code, technical designs, and engineering records to maintain accurate compliance documentation.
• Maintain consistency, accuracy, traceability, and quality across security documentation and supporting evidence.
• Identify missing documentation, inconsistent policies, and weaknesses in security control descriptions, ensuring they are addressed promptly.
• Improve and establish repeatable compliance processes that support continuous audit readiness.

Qualifications

Required Qualifications

• Bachelor’s degree with at least 12 years of relevant experience, a master’s degree with 10+ years, or a Ph.D. with at least 7 years of experience in cybersecurity compliance, Governance, Risk and Compliance (GRC), security policy, or related fields.
• Extensive practical experience developing and maintaining System Security Plans (SSPs) based on NIST SP 800-171 and NIST SP 800-53.
• Proven experience supporting Authority to Operate (ATO) processes, formal security assessments, and/or Cybersecurity Maturity Model Certification (CMMC) readiness.
• Experience managing POA&Ms, coordinating remediation activities, and organizing structured security evidence collection.
• Strong experience serving as a primary contact for auditors, assessors, and compliance teams.
• Demonstrated ability to develop and maintain security policies, standards, and SOPs that comply with established control frameworks.
• Ability to interpret system architecture diagrams, infrastructure-as-code, and technical documentation to confirm that security control descriptions match actual implementations.
• Practical understanding of AWS and cloud-native technologies, including EKS, Identity and Access Management (IAM), encryption, logging, and cloud security controls.
• Excellent attention to detail and the ability to identify unclear, inconsistent, or incomplete compliance documentation.
• Outstanding written communication skills, particularly the ability to convert technical security requirements into concise, auditor-ready documentation.
• U.S. citizenship is mandatory for this position.

Preferred Qualifications

• Experience preparing for, undergoing, or maintaining CMMC Level 2 certification and assessments.
• Previous involvement in FedRAMP or Department of Defense (DoD) ATO documentation and authorization processes.
• Experience working in complex cloud and platform environments where security controls must be directly linked to operational infrastructure.
• Knowledge of evidence management, security control traceability, and structured documentation practices within regulated industries.
• Experience working alongside cloud engineering, DevSecOps, and platform development teams.
• Ability to contribute effectively in organizations where security compliance frameworks are still being developed, improved, and expanded.

Salary and Benefits

Target Salary: $112,000 – $179,000 per year

The expected compensation range reflects the typical base salary for this position.

Final compensation will depend on factors such as job responsibilities, professional experience, educational background, technical expertise, qualifications, geographic location, and business or contract requirements.

Additional compensation may include overtime pay, shift differentials, and discretionary bonuses, depending on the position.

Employee Benefits

Eligible Peraton employees may receive a comprehensive benefits package that includes:

• Medical, dental, and vision insurance.
• Life insurance coverage.
• Health Savings Account (HSA).
• Short-term and long-term disability coverage.
• Employee Assistance Program (EAP).
• Paid parental leave.
• 401(k) retirement savings plan.
• Paid vacation and other time off.
• Company-paid holidays.

Application Information

The job posting is expected to remain open for approximately 30 days from its original publication date. However, Peraton may adjust the application deadline depending on hiring requirements and the availability of qualified applicants.

Candidates should be prepared to participate in an on-camera interview and undergo identity verification during the recruitment process.

Important Interview Policy: Peraton strictly prohibits the use of artificial intelligence tools during interviews unless the candidate has received prior written permission. Applicants must provide their own responses throughout the interview process.

Equal Employment Opportunity

Peraton is an equal opportunity employer. Employment decisions are made without discrimination based on disability, protected veteran status, or any other characteristic protected by applicable law.

Employer: Peraton / Peraton Labs
Position: Senior Cyber Security Engineer
Salary: $112,000 – $179,000 annually
Citizenship Requirement: U.S. citizenship required