Cyber IT Specialist

Encompasses technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support for Bureau of Diplomatic Security, Cyber and Technology Security Directorate in three key offices/functional areas: Cyber Monitoring and Operations, Cyber Threat and Investigations, and Technology Innovation and Engineering State., Peraton is looking for a Cyber IT Specialistto become part of our Federal Strategic Cyber Group., * Monitor mission-critical infrastructure and security platforms - including Splunk, SolarWinds, Microsoft Defender for Endpoint (MDE), Zeek/Bro, and Suricata - to ensure system availability, performance, and security visibility.

• Maintain operational continuity through shift turnovers, Task List Reports, mailbox monitoring, and timely communication of incidents, system changes, and outstanding operational activities.
• Create, update, and manage ServiceNow incidents, service requests, and operational tasks, performing initial triage, troubleshooting, escalation, resolution verification, and documentation in accordance with established procedures and Service Level Agreements (SLAs).
• Troubleshoot enterprise infrastructure, applications, and virtual machines across Windows, Linux, VMware, and Nutanix environments, coordinating technical resources to restore services and minimize operational disruptions.
• Coordinate Major Incident Response Plan (MIRP) activities, including incident bridge setup, stakeholder notifications, technical escalations, and cross-functional troubleshooting to support timely service restoration.
• Support enterprise vulnerability management through Tenable Exposure Management, coordinating scanning activities, vulnerability remediation, asset validation, and compliance tracking across multiple FISMA authorization boundaries.
• Collaborate with System Owners (SOs), Information System Security Officers (ISSOs), and Enterprise Scanning personnel to resolve asset discrepancies, address vulnerability findings, and maintain accurate FISMA compliance records.
• Maintain enterprise asset inventories, Tenable scanning documentation, and FISMA boundary records using Microsoft Excel and ServiceNow, supporting asset accountability, remediation tracking, and enterprise security reporting.
• Utilize Databricks within Microsoft Azure Government to query security datasets, review operational data, and support cybersecurity analytics, trend analysis, and reporting activities.
• Support endpoint security operations through MDE deployment, configuration, and troubleshooting across Windows and Linux systems while maintaining Splunk log collection and monitoring capabilities.
• Support enterprise Identity and Access Management (IAM) operations using ServiceNow, CyberArk, ARS, PHUB, and Okta, facilitating account provisioning, privileged access requests, and CAC/PIV authentication across enterprise environments.
• Investigate recurring incidents, perform trend analysis, and contribute to root cause analysis (RCA) efforts to identify corrective actions, improve infrastructure reliability, and reduce operational disruptions.
• Prepare operational reports and deliver briefings to government and contractor leadership on infrastructure health, ongoing incidents, operational risks, and service restoration efforts, ensuring timely communication of Priority 1 and Priority 2 incidents in accordance with established SLAs.
• Support disaster recovery, change management, quality assurance, and hardware asset coordination - including equipment inventory and shipments to CONUS and OCONUS locations - to maintain operational readiness and mission continuity.

• A Bachelor’s degree and 1 years of experience.
• An additional 4 years of experience may be substituted in lieu of the bachelor’s degree requirement.
• Must either possess and maintain, or obtain prior to start date, one of the following professional certifications:

• CCNA Security; CEH; CISSP; CySA+; GICSP; GSEC; Security+ CE; CND; SSCP

• Exposure to or coursework in monitoring tools such as Splunk or SolarWinds.
• Basic familiarity with ServiceNow or similar ITSM platforms for incident and request management.
• Understanding of incident response fundamentals, including severity classification and escalation procedures.
• Working knowledge of Windows operating systems; Linux exposure is a plus.
• Strong analytical and troubleshooting skills with a willingness to learn.
• Demonstrated strong written and verbal communication skills with the ability to provide clear, timely updates.
• U.S. citizenship required.
• Must be able to obtain an interim Secret security clearance prior to start date.
• Must be able to obtain a final Top Secret security clearance.

Preferred Qualifications:

• Familiarity with VMware or Nutanix virtualization environments.
• Exposure to cloud platforms such as Microsoft Azure Government (MAG) or Government Community Cloud (GCC).
• Basic awareness of FISMA compliance frameworks or federal IT security requirements.
• Familiarity with IAM or privileged access management (PAM) concepts (CyberArk, Okta, or similar).
• Familiarity with vulnerability management tools such as Tenable Nessus or Tenable Exposure Management.
• A+, ITIL Foundation, or equivalent entry-level certification.

Target Salary Range: $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure.