10 hours ago
Base Salary
$135k - $216k/yr
Responsibilities
- Conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI using threat intelligence and the MITRE ATT&CK framework.
- Analyze cloud-native telemetry and SIEM data to investigate suspicious activity.
- Administer and optimize Qualys and Tenable vulnerability scanning across cloud tenants.
- Analyze vulnerability and configuration findings, prioritize remediation, and eliminate false positives.
- Lead vulnerability and threat remediation with engineering and patching teams and verify closure through rescanning.
- Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and STIG/CIS benchmark deviations.
- Develop detection rules, queries, and automated hunt playbooks.
- Support incident response through scoping, containment recommendations, and root cause analysis.
- Produce hunt reports, remediation tracking, and POA&M inputs and brief findings to customers, ISSOs/ISSMs, and leadership.
- Mentor junior security engineers in threat hunting, vulnerability analysis, and tool usage.
Requirements
- Bachelor’s degree and 12 years of experience, master’s degree and 10 years, associate’s degree and 14 years, or high school diploma/equivalent and 16 years of experience.
- At least 8 years of information security experience, including at least 5 years in cloud security engineering.
- Hands-on security experience with at least three of AWS, Azure, GCP, and OCI.
- Expertise with Qualys VMDR, Cloud Agent, and Policy Compliance, plus Tenable.io, Tenable.sc, and Nessus.
- Experience conducting threat hunts and investigations using the MITRE ATT&CK framework.
- Proficiency writing queries and analyzing logs in Splunk, Microsoft Sentinel, Elastic, or an equivalent platform.
- Experience remediating vulnerabilities and misconfigurations on Windows, Linux, containers, and cloud-native services.
- Deep knowledge of cloud IAM, network security, encryption, and logging architecture.
- Scripting or automation experience with Python, PowerShell, or Bash and familiarity with Terraform or Ansible.
- Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls.
- U.S. citizenship and ability to obtain and maintain a DHS Public Trust.
- Preferred certifications include CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer.
Benefits
- Medical, dental, vision, life, health savings account, short- and long-term disability, EAP, parental leave, 401(k), paid time off, and company-paid holidays.
- Remote work is available, but the employee must reside and work within the United States.
- The position requires working online from 8:00 AM to 5:00 PM Eastern.
Tech Stack
Categories
About Peraton
Peraton builds and integrates mission systems, cyber, space, and intelligence solutions for U.S. defense, intelligence, and civil agencies. It delivers enterprise IT, satellite and terrestrial communications, and spectrum management under government contracts. Founded in 2017, the company is headquartered in Reston, Virginia and is privately held by Veritas Capital.