Lead Associate, Information Assurance and Security

Peraton

. Lead all security analysis, compliance, and oversight activities for the program .

Posted 10/16/2026full-timeHome • Missouri • United StatesSenior💰 $66,000 - $106,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security analysis, compliance, and risk management for large-scale Federal programs, with a strong focus on FISMA, NIST standards, and CMS governance. Proficient in integrating security requirements into Agile development processes and leading vulnerability management initiatives.

Highest-signal resume keywords

FISMA ComplianceNIST SP 800-53Vulnerability ManagementAgile SDLC IntegrationSecurity Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security AnalysisRisk ManagementVulnerability AssessmentsSecurity ScanningCompliance AlignmentSecurity DocumentationMetrics ReportingRisk Mitigation PlanningSystem Architecture ReviewSecurity Awareness Training

Soft Skills

Excellent Communication SkillsCollaborationLeadership

Tools & Technologies

Vulnerability Management PlatformsSIEM ToolsSecurity Automation Technologies

Certifications & Qualifications

CISSPCISMSecurity+CEH

Industry Keywords

CMS ARSATO ProcessesHIPAA ComplianceHealthcare ITFederal Security Audits

Tech Stack

Tools & technologies

SDLC

About the role

Key responsibilities & impact

Lead all security analysis, compliance, and oversight activities for the program
Conduct comprehensive security assessments of system architecture, data flows, interfaces, and inherited controls
Develop, maintain, and enforce program-wide security policies, procedures, and documentation
Manage vulnerability scanning, analysis, reporting, and remediation coordination
Lead risk mitigation strategies and recommend responses to scans, assessments, POA&Ms, and audits
Prepare and support CMS security assessments, FISMA reviews, and ATO activities
Integrate security requirements into Agile development workflows and guide Scrum teams, architects, and developers
Review technical designs, user stories, and system enhancements for security impacts and compliance alignment
Monitor regulatory and CMS security updates
Collaborate with engineering, operations, compliance, and program leadership on secure-by-design solutions
Develop and deliver security awareness and compliance training
Maintain security documentation, dashboards, and metrics reporting for program leadership

Requirements

What you’ll need

5 years with BS/BA; or 9 years with high school diploma
Demonstrated experience leading security analysis, compliance, and risk management activities for large-scale Federal programs
Strong understanding of FISMA, NIST SP 800-53, NIST RMF, and CMS ARS
Hands-on experience conducting or managing vulnerability assessments, security scanning, POA&M lifecycle management, and risk mitigation planning
Experience preparing for and supporting Federal security audits, assessments, and ATO activities
Ability to review system designs, data flows, and architecture diagrams for security considerations and compliance alignment
Experience working directly with Agile teams and integrating security requirements into Agile SDLC processes
Excellent written and verbal communication skills, with the ability to communicate with both technical and nontechnical stakeholders
US. Citizenship required
Must have the ability to obtain and maintain a Public Trust clearance
Experience supporting CMS programs, including familiarity with CMS ARS, ATO processes, and CMS governance expectations
Relevant security certifications such as CISSP, CISM, Security+, CEH, or equivalent
Experience with vulnerability management platforms, SIEM tools, and security automation technologies
Prior experience in healthcare IT and knowledge of HIPAA compliance requirements
Experience integrating or modernizing systems in environments with legacy system dependencies
Experience supporting large-scale, multi-team modernization or transformation initiatives