Responsibilities
Peraton Labs is seeking a Senior Cyber Security Engineer to help establish, maintain, and mature the written compliance posture of our Agentic AI platform environment. This individual will play a critical role in ensuring our documented security and compliance artifacts accurately reflect the infrastructure, controls, and operational realities of the platform.
This role will own the development and maintenance of core compliance documentation, including System Security Plans (SSPs), supporting policies and standard operating procedures, POA&M management, and audit evidence coordination. This role will ensure proper security control implementation and be responsible for end-to-end Risk Management Framework (RMF) and Authority to Operate (ATO) compliance. The ideal candidate is highly detail-oriented, strong in policy and control documentation, and comfortable working closely with platform and security engineers to translate technical implementation into clear, auditor-ready language.
This is a high-trust role at the intersection of compliance, policy, and platform execution. The right candidate will serve as the connective tissue between what is written, what is required, and what is actually built and operated.
Key responsibilities may include, but are not limited to
- Own and maintain the written compliance posture of the Agentic AI platform
- Author, update, and evolve System Security Plans (SSPs) and related compliance artifacts in support of ATO and broader assessment efforts
- Develop additional SSPs and associated documentation required to support expanding authorization needs
- Build, organize, and maintain a comprehensive security policy and SOP library aligned to relevant control frameworks
- Manage POA&Ms, including documenting gaps, tracking remediation progress, and maintaining visibility into open items
- Coordinate and run evidence collection cycles in support of internal reviews, external assessments, and audit activities
- Serve as the primary compliance point of contact for internal auditors, external assessors, and compliance stakeholders
- Partner closely with platform, cloud, and security engineers to validate that documented control narratives accurately reflect implemented infrastructure and operational practices
- Review architecture diagrams, infrastructure-as-code, technical diagrams, and engineering documentation to ensure compliance materials remain accurate and defensible
- Help ensure consistency, traceability, and quality across all compliance documentation and supporting artifacts
- Identify documentation gaps, policy inconsistencies, or control narrative issues early and drive them to resolution
- Support the maturation of repeatable compliance processes that strengthen audit readiness over time