Peraton seeks a Red Team Cybersecurity Reviewer to provide information assurance expertise in the conduct of DODIN cybersecurity reviews on site at CONUS, OCONUS, and DOD mission partner locations. 

Location:  Fort Meade, MD and/or Chamberburg, PA.

Tasks include:

• Provide expertise in current version of Vulnerability Scan Procedures Guide and any official correspondence sent via electronic transmission or verbal meetings to conduct scans.
• Conduct standard internal network scans, from the premise router inward while ensure scanning of all site-managed network spaces.
• Perform technical Security Readiness Reviews (SRR)
• Ensure the use the appropriate technology STIG/SRG and, where applicable, the appropriate automated script or tool for that technology.
• Conduct at least 8 mission sets per year
• Conduct assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy
• Assist in developing EXSUMs/ Briefings/Reports
• Develop and maintain cybersecurity vulnerability review, inspection, and audit SOPs, TTPs, checklists, and guides
• Support on-the-job training and certify new Reviewers via the reviewer certification process
• Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions
• Travel is expected to worldwide locations.  Travel will be conducted in accordance with the Task Order guidelines.

Required:

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. Will consider HS with 16 years of experience with no degree.
• Cross-certified in multiple related technology areas in order to conduct reviews of network vulnerability scan, virtual infrastructure, cloud, and other related areas.
• Able to analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives (i.e., analysis of mitigations).
• Senior reviewers must have at least 2 years of direct experience
• Able to conduct reviews in the following areas:
  • Boundary Security (i.e., Firewalls, Network Device Management (NDM), policies, and any boundary technology)
  • Network Infrastructure (i.e., Firewalls, Routers, Switches, NDM, policies, and network infrastructure)
  • Domain Name System (DNS)
  • Exchange Server
  • Network Vulnerability Scan
  • Traditional Security
  • Releasable Review
  • Virtual Infrastructure and Environments
  • Cross Domain Solution (CDS) (Administrative and Limited Technical Review)
  • Endpoint Security Solutions
  • Mobility (Wireless, Wireless Discovery, 802.11, BlackBerry Enterprise Server (BES), BlackBerry Handheld, etc.)
  • Voice and Video over IP (VVOIP)
  • Database (Oracle, SQL, or any other database)
  • Windows Infrastructure
  • UNIX Infrastructure (includes all systems based on UNIX)
  • Web Review (i.e., services, servers, etc.)
  • Other Review (i.e., includes any technology not specifically assigned above using SRGs, STIGs, or best practices utilizing the most appropriate certified technology area)
• Current DOD 8140/8570 IAT Level II certification
• Current DOD 8140/8570 IAM Level II certification
• Active TS/SCI clearance

Desired, not required:

• Current DOD 8140/8570 CSSP-Auditor certification
• Current DOD 8140/8570 IAM Level III certification

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligible to participate in an attractive bonus plan.