Information Assurance and Security Engineer

Peraton

. Serve as an Information System Security Officer (ISSO) for a cloud-hosted, Azure-based system .

Posted 10/27/2026full-timeRemote • United StatesSeniorLead💰 $104,000 - $166,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information System Security Officer (ISSO) responsibilities, including risk management framework (RMF) documentation, security assessments, and compliance with federal regulations. Proficient in Azure-based security solutions and capable of leading security initiatives to enhance organizational security posture.

Highest-signal resume keywords

Information System Security Officer (ISSO)Risk Management Framework (RMF)Azure-Based Cloud SolutionsNIST 800-53 ComplianceCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Vulnerability ManagementSecurity Test PlansContinuous Monitoring ArtifactsSecurity Incident ResponseSystem Configuration Security

Soft Skills

Strong Communication SkillsTechnical Guidance

Tools & Technologies

Azure ADTenable/NessusMicrosoft DefenderAzure DevOpsGitHub Actions

Certifications & Qualifications

CISSP CertificationCompTIA Security+ISC2 CAPISC2 CCSPAzure Security Engineer Associate (AZ-500)

Industry Keywords

DHS 4300AFederal RegulationsAgile MethodologiesZero Trust ArchitectureLeast-Privilege Design

Tech Stack

Tools & technologies

AzureCloudVault

About the role

Key responsibilities & impact

Serve as an Information System Security Officer (ISSO) for a cloud-hosted, Azure-based system
Provide technical and programmatic information assurance support to internal and external customers
Design, develop, and implement security requirements across enterprise and program-level business processes
Prepare documentation and security artifacts based on customer input and industry-standard guidelines, including NIST RMF and DHS 4300A
Lead certification and accreditation activities for the program
Develop and maintain security test and evaluation plans and contingency plans
Conduct risk and vulnerability assessments and prepare formal reports and recommendations
Analyze policies and procedures for compliance with Federal laws, regulations, and standards
Recommend remediation strategies to close security gaps
Recommend system enhancements to address deficiencies and improve the security posture
Design, test, and integrate computer and network security tools
Secure system configurations and ensure compliant deployments
Perform system scans, interpret results, and support system administrators in resolving findings
Conduct internal security program audits and develop mitigation strategies
Provide technical guidance for secure architecture design supporting evolving mission needs
Support security incident investigations, root-cause analysis, and response
Develop, document, and track corrective action plans

Requirements

What you’ll need

Bachelor's degree and 8 years of experience, or a Master's degree and 6 years of experience, or an Associate's degree and 10 years of experience, or a High School diploma/equivalent and 12 years of experience
Must be a U.S. Citizen
Ability to obtain and maintain a DHS Public Trust clearance
Demonstrated experience performing Information System Security Officer (ISSO) duties in a Federal or regulated environment
Experience creating and maintaining RMF documentation, SSPs, POA&Ms, security test plans, and continuous monitoring artifacts
Experience supporting software development teams delivering Azure-based cloud solutions
Familiarity with Azure AD, App Services, Key Vault, App Gateway/WAF, and cloud-native security controls
Hands-on experience identifying, tracking, and managing security vulnerabilities
Experience interpreting scan results, such as Tenable/Nessus and Microsoft Defender
Strong understanding of NIST 800-53, 800-30, 800-37, and 800-171 frameworks
Active CISSP certification, or ability to obtain within 6 months of hire
Strong communication skills, including developing briefing materials and presenting technical concepts to nontechnical stakeholders
Preferred: working knowledge of DHS security policies, controls, and compliance requirements, including DHS 4300A/B and associated RMF processes
Preferred: knowledge of Azure security architecture patterns, including Zero Trust, RBAC, network segmentation, PIM/PIM, and least-privilege design
Preferred: strong understanding of Agile methodologies and collaboration within cross-functional Agile teams
Preferred: experience with security automation and DevSecOps workflows, including GitHub Actions, Azure DevOps pipelines, and IaC security scanning
Preferred: experience implementing Continuous Monitoring plans, dashboards, and automated control reporting
Preferred: additional security certifications such as ISC2 CAP, ISC2 CCSP, CompTIA Security+, or Azure Security Engineer Associate (AZ-500)

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Health savings account
Short-term disability
Long-term disability
Employee assistance program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Potential eligibility for overtime
Potential eligibility for shift differential
Potential eligibility for a discretionary bonus