Software Development, Lead Associate
Pubblicato il 14-09-2026 - Peraton in Vicenza
Qualifications (Required):
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field; additional experience may be substituted in lieu of degree.
- 5 to 7 years of experience in cybersecurity, DevSecOps, or system engineering roles supporting federal programs.
- Experience acting as an ISSO or security engineer for a FISMA Moderate or FedRAMP Moderate system.
- Hands‑on experience preparing security authorization documentation such as SSPs, SARs, POA&Ms;, and Continuous Monitoring updates.
- Strong understanding of NIST 800‑53 security controls, Risk Management Framework (RMF), CMS ARS 5.1, and continuous monitoring requirements.
- Practical experience supporting or integrating security processes in DevSecOps pipelines, CI/CD workflows, or automated deployment environments.
- Experience with vulnerability management tools and processes, including scanning, analysis, and remediation tracking.
- Ability to support audits and communicate effectively with assessment teams, program stakeholders, and government security representatives.
- U.S. citizenship and the ability to obtain and maintain a public trust or equivalent clearance.
Qualifications (Preferred):
- Experience supporting CMS programs or other HHS components.
- Familiarity with FedRAMP documentation, cloud boundary definitions, and cloud‑native security practices.
- Experience with AWS or Azure security services, cloud configuration baselines, and cloud compliance frameworks.
- Working knowledge of tools commonly used within Peraton and similar enterprises, such as GitLab/GitHub CI/CD, Jenkins, Terraform, Ansible, Tenable, Splunk, or similar platforms.
- Security certifications such as Security+, CISSP, CISM, CCSP, or AWS/Azure security certifications.
- Experience integrating legacy systems into modern cloud or hybrid architectures with secure migration practices.
- Knowledge of container security (Docker, Kubernetes) and infrastructure‑as‑code security scannin