Tier 2 Shift Lead / Secret

Peraton is a leading next-generation national security company dedicated to advancing missions of critical importance across the globe and even extending into outer space. As the world's foremost mission capability integrator and an innovative enterprise IT provider, Peraton delivers highly trusted and distinctive solutions and technologies designed to safeguard the nation and its allies. Operating at the pivotal intersection of both traditional and emerging threats across diverse domains—including land, sea, space, air, and cyberspace—Peraton plays a vital role in national defense. The company is a respected partner to key government agencies and supports every branch of the U.S. armed forces. Every day, Peraton’s workforce addresses some of the most challenging problems faced by its customers, working tirelessly to keep people safe and secure worldwide. For more information about their mission and impact, you can visit peraton.com.

This role is set within Peraton’s Federal Strategic Cyber Mission program, specifically supporting the Bureau of Diplomatic Security’s Cyber and Technology Security Directorate. This program integrates technical, engineering, data analytics, cyber security, management, operations, and logistical support to protect critical government functions. The position is based on-site in Beltsville, MD, operating during the day shift from 6:00 AM to 2:00 PM EST, Tuesday through Saturday. The Tier 2 Cyber Incident Response Team (CIRT) Shift Lead will be integral in overseeing and managing cyber security incident responses, coordinating with various stakeholders to ensure swift detection, analysis, and remediation of security threats.

The Tier 2 CIRT Shift Lead will use deep technical expertise to analyze cyber security events and incidents, including the examination of logs from various sources such as host logs, firewalls, intrusion detection systems, and endpoint detection and response (EDR) solutions. The role demands proficiency in forensic analysis, malware investigation, and the ability to characterize network traffic to detect anomalous behavior and potential cyber threats. The incumbent will actively partner with Department of State teams and coordinate security incident workflows using platforms like SOAR (Security Orchestration, Automation, and Response).

Additionally, the Shift Lead will be responsible for reviewing ticket accuracy, communicating with CIRT Watch Officers and government leaders, driving procedural improvements, and supporting candidate technical interviews. The position requires a proactive approach to ensure coordinated remediation actions are effective and that the cyber security posture remains robust against evolving threats.

Peraton values a strong combination of experience and credentials. Candidates are expected to possess extensive experience in incident response lifecycle management and proficiency with SOAR and Security Information and Event Management (SIEM) platforms like Splunk and Microsoft Sentinel. Knowledge of cloud security monitoring, malware analysis, cyber threat intelligence, and familiarity with frameworks such as MITRE ATT&CK and D3FEND is essential. Applicants must be U.S. citizens with an active Secret security clearance at the outset of employment.

The company offers a competitive salary range from $104,000 to $166,000, reflecting various factors including experience, education, and location. In addition to base pay, employees may be eligible for overtime, shift differentials, and discretionary bonuses. Peraton also provides a comprehensive benefits package, including medical, dental, vision coverage, life insurance, health savings accounts, disability insurance, employee assistance programs, parental leave, 401(k) plans, paid time off for vacation, and company paid holidays.

Peraton fosters an inclusive and equal opportunity working environment, welcoming applicants from diverse backgrounds including those with disabilities and protected veterans. The application period typically lasts around 30 days but may change based on business needs and candidate availability. Applicants may be required to undergo identity verification and interviews as part of the hiring process.