Cybersecurity Assessments -- Lead

Peraton seeks an Cybersecurity Reviewer to conduct DODIN cybersecurity reviews on site at CONUS, OCONUS, and DOD mission partner locations. 

Location: Fort Meade, MD.

Tasks include:

• Conduct at minimum of 8 mission sets per year
• Conduct assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy
• Assist in developing EXSUMs/ Briefings/Reports
• Develop and maintain cybersecurity vulnerability review, inspection, and audit SOPs, TTPs, checklists, and guides
• Support on-the-job training and certify new Reviewers via the reviewer certification process
• Perform technical Security Readiness Reviews (SRR)
• Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions

Required:

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. Will consider HS with 16 years of experience  
• Current DOD 8140 certifications (IAM  Level II certification such as CISM, CISSP or comparable) 
• Current DOD 8140 (IAT Level II or III certification such as CEH, CySA+, and/or Security+)
• Senior reviewers must have at least 2 years of direct experience 
• Able to analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives 
• Experience in measuring effectiveness of defense-in-depth architecture against known vulnerabilities and risk indicators
• Experience with maintaining deployable cyber defense audit toolkit to support cyber defense audit missions.
• Must have knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing
• Familiar with addressing multiple non-traditional IT areas such as:
  • Supply Chain Risk Management (SCRM)
  • Cybersecurity Contracts
  • Cross Domain Solution (CDS)
  • Cloud (Cloud Services, Software as a Service (SaaS)
  • Platform as a Service (PaaS)
  • Infrastructure as a Service (IaaS)
  • Control Systems (CS) / Operational Technology (OT) / Industrial Control Systems / Supervisory Control and Data Acquisition (SCADA) (e.g., Rockwell Automation, OMRON, SIEMENS, and GE)
  • Platform Information Technology (PIT) (as defined in DoDI 8500.01, “Cybersecurity”)
• Travel is expected to worldwide locations.  Travel will be conducted in accordance with the Task Order guidelines.
• Active DoD TS/SCI clearance or ability to obtain SCI clearance
• U.S Citizenship required