Peraton
DevSecOps Lead
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Peraton
Peraton Inc. is a national security and technology company based in Reston, Virginia. Established in 2017 from the spin-off of Harris Corporation's government IT services division, Peraton focuses on high-consequence mission areas such as space, intelligence, cyber, defense, and homeland security. The company has expanded significantly through strategic acquisitions, enhancing its capabilities and customer base. Peraton offers a wide range of services tailored for U.S. government agencies. These include space protection and satellite services, advanced cybersecurity solutions, and IT support for defense and homeland security. The company also provides enterprise IT and cloud services, leveraging its expertise in large-scale infrastructure design and governance. Through Peraton Labs, it engages in applied research and innovation, contributing to advancements in areas like electronic warfare and quantum computing. Peraton serves various federal agencies, including the Department of Defense and the Department of Homeland Security, with notable contracts for data center optimization and misinformation countermeasures.
Security at Peraton
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Peraton emphasizes DevSecOps, aiming to "implement DevSecOps".
- Their approach involves incorporating security requirements into development workflows and views security as an enabler, as suggested by the quote "Security is like brakes on a car".
- They conduct secure design reviews, code audits, and vulnerability testing.
Security Team
Christy Wilder has been appointed as Chief Security Officer. Information regarding explicit AppSec organizational structure, reporting lines, named AppSec team leads (beyond the corporate CSO), and team size estimates is not publicly available.
Key Initiatives
Peraton's initiatives include conducting app security assessments, secure SDLC artifacts, and emphasizing DevSecOps and automation. They focus on vulnerability intake and monitoring, including monitoring frameworks, libraries, and third-party software. AI is utilized for cyber operations and prioritization, with tools like ThreatBoard reducing incident resolution times. There is also an emphasis on Zero Trust and Cloud security, with efforts to "build an enterprise Zero Trust solution". Information on a Security Champions program, explicit vulnerability management SLAs, MTTR, ticketing ownership, and recent AppSec-specific initiative announcements is not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.