Cyber IT Specialist
Peraton · Beltsville, MD, US
About this role
## Peraton — Cyber IT Specialist **Location:** Beltsville, MD **Schedule:** Tuesday – Saturday (Hours: TBD) --- ### Responsibilities - Support **24/7/365 enterprise cybersecurity operations** across OpenNet, ClassNet, DMZ, NEN/DIN, **Microsoft Azure Government (MAG)**, **Government Community Cloud (GCC)**, and **Google Workspace (OOB)**. - Monitor mission-critical infrastructure and security platforms, including **Splunk**, **SolarWinds**, **Microsoft Defender for Endpoint (MDE)**, **Zeek/Bro**, and **Suricata**. - Maintain operational continuity via **shift turnovers**, **Task List Reports**, mailbox monitoring, and timely communication of incidents, system changes, and outstanding activities. - Create/update/manage **ServiceNow** incidents, service requests, and operational tasks (initial triage, troubleshooting, escalation, resolution verification, and documentation per procedures and **SLAs**). - Troubleshoot enterprise infrastructure, applications, and virtual machines across **Windows, Linux, VMware, and Nutanix**. - Coordinate **Major Incident Response Plan (MIRP)** activities (incident bridge setup, stakeholder notifications, technical escalations, cross-functional troubleshooting). - Support **vulnerability management** using **Tenable Exposure Management** (scanning coordination, remediation support, asset validation, compliance tracking across FISMA boundaries). - Collaborate with **System Owners (SOs)**, **ISSOs**, and scanning personnel to resolve asset discrepancies and maintain accurate **FISMA compliance** records. - Maintain enterprise asset inventories and documentation using **Microsoft Excel** and **ServiceNow**. - Use **Databricks (Azure Government)** to query security datasets and support analytics, trend analysis, and reporting. - Support endpoint security operations through **MDE** deployment/configuration/troubleshooting while maintaining **Splunk** log collection/monitoring. - Support **Identity and Access Management (IAM)** operations using **ServiceNow**, **CyberArk**, **ARS**, **PHUB**, and **Okta** (provisioning, privileged access requests, **CAC/PIV** authentication). - Investigate recurring incidents, perform trend analysis, and contribute to **Root Cause Analysis (RCA)**. - Prepare operational reports and deliver briefings to leadership on infrastructure health, incidents, risks, and service restoration; ensure timely communication of **Priority 1/2** incidents per SLAs. - Support disaster recovery, change management, quality assurance, and hardware asset coordination (including equipment inventory and shipments to **CONUS/OCONUS**). --- ### Qualifications **Minimum requirements** - **Bachelor’s degree + 1 year** of experience (or **4 additional years** of experience in lieu of the degree). - Must possess and maintain (or obtain prior to start) one of: **CCNA Security, CEH, CISSP, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP**. - Exposure to or coursework in monitoring tools such as **Splunk** or **SolarWinds**. - Basic familiarity with **ServiceNow** (or similar ITSM) for incident/request management. - Understanding of incident response fundamentals (severity classification and escalation). - Working knowledge of **Windows** (Linux exposure is a plus). - Strong analytical/troubleshooting skills and willingness to learn. - Strong written/verbal communication. - **U.S. citizenship required**. - Ability to obtain **interim Secret** clearance prior to start. - Ability to obtain **final Top Secret** cl
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.