[Remote] Cyber Security Engineer

Note: The job is a remote job and is open to candidates in USA. Peraton Labs is seeking a Senior Cyber Security Engineer to establish, maintain, and mature the written compliance posture of its Agentic AI platform. The role owns compliance documentation, supports end-to-end RMF and ATO compliance, coordinates audit evidence, and works with engineering teams to ensure documentation reflects implemented systems and controls.

Responsibilities

• Own and maintain the written compliance posture of the Agentic AI platform
• Author, update, and evolve System Security Plans (SSPs) and related compliance artifacts in support of ATO and broader assessment efforts
• Develop additional SSPs and associated documentation required to support expanding authorization needs
• Build, organize, and maintain a comprehensive security policy and SOP library aligned to relevant control frameworks
• Manage POA&Ms, including documenting gaps, tracking remediation progress, and maintaining visibility into open items
• Coordinate and run evidence collection cycles in support of internal reviews, external assessments, and audit activities
• Serve as the primary compliance point of contact for internal auditors, external assessors, and compliance stakeholders
• Partner closely with platform, cloud, and security engineers to validate that documented control narratives accurately reflect implemented infrastructure and operational practices
• Review architecture diagrams, infrastructure-as-code, technical diagrams, and engineering documentation to ensure compliance materials remain accurate and defensible
• Help ensure consistency, traceability, and quality across all compliance documentation and supporting artifacts
• Identify documentation gaps, policy inconsistencies, or control narrative issues early and drive them to resolution
• Support the maturation of repeatable compliance processes that strengthen audit readiness over time

Skills

• Minimum of BS with 12+ years of experience, MS with 10+ years of experience, or a Ph.D. with 7 years of experience in security compliance, GRC, cybersecurity policy, or related compliance-focused roles
• Deep hands-on experience authoring and maintaining System Security Plans (SSPs) aligned to NIST 800-171 and NIST 800-53
• Demonstrated experience supporting systems through ATO efforts, formal security assessments, and/or CMMC readiness activities
• Experience managing POA&Ms, coordination remediation tracking, and running structured evidence collection cycles
• Strong background serving as a primary point of contact for auditors, assessors, and compliance stakeholders
• Proven ability to build and maintain policy libraries, standards, and SOPs aligned to a formal control framework
• Ability to read and interpret architecture diagrams, infrastructure-as-code, and technical documentation well enough to validate that control narratives reflect implemented reality
• Working knowledge of AWS and cloud-native environments, including concepts such as EKS, IAM, logging, encryption, and cloud security controls
• Exceptional attention to detail, with the ability to identify vague, conflicting, or incomplete documentation and drive clarity
• Strong written communication skills, with the ability to translate technical implementation into concise, auditor-ready language
• US Citizenship is required for this position
• Experience supporting CMMC Level 2 preparation, assessment, or sustainment activities
• Background contributing to FedRAMP or DoD ATO packages
• Experience working in highly technical cloud or platform environments where security controls must be mapped directly to operational systems
• Familiarity with evidence management, control traceability, and structured documentation practices in regulated environments
• Experience collaborating closely with cloud, DevSecOps, or platform engineering teams
• Ability to operate effectively in an environment where compliance maturity is actively being built and refined

Benefits

• Eligible employees may be eligible for overtime.
• Eligible employees may be eligible for shift differential.
• Eligible employees may be eligible for a discretionary bonus in addition to base pay.
• Medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays.

Company Overview