OT Reviewer

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Responsibilities

Peraton seeks an OT Reviewer to support PACOM J6 establish the organizational foundation for ICS/SCADA-focused cybersecurity assessments across the PACOM AOR.   

Location:  Fort Meade (Annapolis Junction), MD

Primary responsibilities:

• Develop OT-specific assessment criteria aligned to DISA OT STIGs
  • Provide expertise in current version of Vulnerability Scan Procedures Guide and any official correspondence sent via electronic transmission or verbal meetings to conduct scans.
  • Conduct standard internal network scans, from the premise router inward while ensure scanning of all site-managed network spaces.
  • Perform technical Security Readiness Reviews (SRR).
  • Ensure the use the appropriate technology STIG/SRG and, where applicable, the appropriate automated script or tool for that technology.
  • Conduct assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.
  • Assist in developing EXSUMs/ Briefings/Reports.
  • Develop and maintain cybersecurity vulnerability review, inspection, and audit SOPs, TTPs, checklists, and guides.
  • Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions .
• Adapt DCDC's existing inspection criteria framework for OT environments
• Integrate with DCDC DRSI workflows
• Complete initial PACOM coordination for Government acceptance of the OT Inspection Criteria Package (Del 15) - Phase 1
• Conduct assessments across AOR - Phase II

Qualifications

Required Qualifications:

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. Will consider Associate+14 or HS16+ years of experience.
• Cross-certified in multiple related technology areas in order to conduct reviews of network vulnerability scan, virtual infrastructure, cloud, and other related areas
• Able to analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives (i.e., analysis of mitigations)
• Familiar with the following areas:
  • Boundary Security (i.e., Firewalls, Network Device Management (NDM) policies, and any boundary technology)
  • Network Infrastructure (i.e., Firewalls, Routers, Switches, NDM, policies, and network infrastructure)
  • Domain Name System (DNS)
  • Exchange Server
  • Network Vulnerability Scan
  • Traditional Security
  • Releasable Review
  • Virtual Infrastructure and Environments
  • Cross Domain Solution (CDS) (Administrative and Limited Technical Review)
  • Endpoint Security Solutions
  • Mobility (Wireless, Wireless Discovery, 802.11, BlackBerry Enterprise Server (BES), BlackBerry Handheld, etc.)
  • Voice and Video over IP (VVOIP)
  • Database (Oracle, SQL, or any other database)
  • Windows Infrastructure
  • UNIX Infrastructure (includes all systems based on UNIX)
  • Web Review (i.e., services, servers, etc.)
  • Technology not specifically assigned above using SRGs, STIGs, or best practices utilizing the most appropriate certified technology area
• U.S Citizenship required
• Active TS with ability to obtain/maintain SCI

Desired Qualifications:

• CERTIFICATIONS: Security+, GSEC, Network+, GCED, CySA+ and Scrum Master.

Target Salary Range

$146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application Statements

The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.