Note: The job is a remote job and is open to candidates in USA. Peraton Labs is seeking a Senior Cyber Security Engineer to establish, maintain, and mature the written compliance posture of its Agentic AI platform. The role owns compliance documentation, supports end-to-end RMF and ATO compliance, coordinates audit evidence, and works with engineering teams to ensure documentation reflects implemented systems and controls.
Responsibilities
- Own and maintain the written compliance posture of the Agentic AI platform
- Author, update, and evolve System Security Plans (SSPs) and related compliance artifacts in support of ATO and broader assessment efforts
- Develop additional SSPs and associated documentation required to support expanding authorization needs
- Build, organize, and maintain a comprehensive security policy and SOP library aligned to relevant control frameworks
- Manage POA&Ms, including documenting gaps, tracking remediation progress, and maintaining visibility into open items
- Coordinate and run evidence collection cycles in support of internal reviews, external assessments, and audit activities
- Serve as the primary compliance point of contact for internal auditors, external assessors, and compliance stakeholders
- Partner closely with platform, cloud, and security engineers to validate that documented control narratives accurately reflect implemented infrastructure and operational practices
- Review architecture diagrams, infrastructure-as-code, technical diagrams, and engineering documentation to ensure compliance materials remain accurate and defensible
- Help ensure consistency, traceability, and quality across all compliance documentation and supporting artifacts
- Identify documentation gaps, policy inconsistencies, or control narrative issues early and drive them to resolution
- Support the maturation of repeatable compliance processes that strengthen audit readiness over time
Skills
- Minimum of BS with 12+ years of experience, MS with 10+ years of experience, or a Ph.D. with 7 years of experience in security compliance, GRC, cybersecurity policy, or related compliance-focused roles
- Deep hands-on experience authoring and maintaining System Security Plans (SSPs) aligned to NIST 800-171 and NIST 800-53
- Demonstrated experience supporting systems through ATO efforts, formal security assessments, and/or CMMC readiness activities
- Experience managing POA&Ms, coordination remediation tracking, and running structured evidence collection cycles
- Strong background serving as a primary point of contact for auditors, assessors, and compliance stakeholders
- Proven ability to build and maintain policy libraries, standards, and SOPs aligned to a formal control framework
- Ability to read and interpret architecture diagrams, infrastructure-as-code, and technical documentation well enough to validate that control narratives reflect implemented reality
- Working knowledge of AWS and cloud-native environments, including concepts such as EKS, IAM, logging, encryption, and cloud security controls
- Exceptional attention to detail, with the ability to identify vague, conflicting, or incomplete documentation and drive clarity
- Strong written communication skills, with the ability to translate technical implementation into concise, auditor-ready language
- US Citizenship is required for this position
- Experience supporting CMMC Level 2 preparation, assessment, or sustainment activities
- Background contributing to FedRAMP or DoD ATO packages
- Experience working in highly technical cloud or platform environments where security controls must be mapped directly to operational systems
- Familiarity with evidence management, control traceability, and structured documentation practices in regulated environments
- Experience collaborating closely with cloud, DevSecOps, or platform engineering teams
- Ability to operate effectively in an environment where compliance maturity is actively being built and refined
Benefits
- Eligible employees may be eligible for overtime.
- Eligible employees may be eligible for shift differential.
- Eligible employees may be eligible for a discretionary bonus in addition to base pay.
- Medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays.
Company Overview