Detection and Case Management Lead — Herndon, VA at

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. We operate at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. Our employees serve as valued partners to essential government agencies and support every branch of the U.S. armed forces, solving the most daunting challenges our customers face every day.

About the Role

We are seeking a highly skilled and innovative Detection and Case Management Lead to join our team in the greater DMV area, specifically supporting the Army National Guard. In this pivotal position, you will define and govern detection architecture standards and lifecycle strategies, ensuring alignment with MITRE ATT&CK and prioritized risks. You will translate complex threat intelligence and vulnerability findings into actionable, testable detection use cases and automated alerting frameworks.

Your day-to-day impact will involve overseeing detection validation through telemetry analysis, adversary emulation, and red-team exercises to tune systems and reduce alert fatigue. You will lead the end-to-end design of case management processes, including triage, enrichment, documentation, and remediation tracking with strict SLAs. Additionally, you will partner with data engineering to enhance telemetry ingestion and evidence integrity, while implementing dashboards that report on detection efficacy and executive risk metrics. A key part of your mission is mentoring SOC/NOSC analysts and coordinating cross-functionally with incident response and threat intelligence teams to drive continuous improvement in detection coverage and case management maturity.

Hiring Process & Application

The application period for this role is estimated to be 30 days from the posting date, though this timeline may be adjusted based on business needs and candidate availability. By applying, you express your interest in the role and the company. During the review process, selected candidates may be required to participate in an on-camera interview and a process to verify their identity.

Equal Opportunity Employer

Peraton is an equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Work location

Work model: On-site

904, McDaniel Court, Herndon, Fairfax County, Virginia, 20170, United States

Herndon, Virginia

Key Responsibilities

check_circleDefine and govern detection architecture standards and lifecycle for correlation rules and analytics pipelines
check_circleTranslate threat intelligence and vulnerability findings into prioritized detection use cases and automated alerting frameworks
check_circleOversee detection validation using telemetry analysis, adversary emulation, and red-team exercises to reduce false positives
check_circleLead end-to-end case management design including triage, enrichment, escalation, remediation tracking, and closure processes
check_circleEstablish runbooks, QA controls, and standard operating procedures for detection tuning and investigative documentation
check_circlePartner with data engineering to improve telemetry ingestion, normalization, enrichment, and evidence integrity
check_circleImplement dashboards and reporting for detection efficacy, MTTD, MTTR, case quality, and executive risk metrics

Requirements

verified5 years with BS/BA; 3 years with MS/MA; 0 years with PhD
verifiedTS/SCI (active) clearance
verifiedMaster's or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR Relevant DoD/Military training (e.g., 4C-255N) OR Relevant certifications
verifiedProgressive cybersecurity experience focused on detection engineering, SOC operations, or security case management
verifiedDemonstrated expertise in SIEM rule engineering, EDR/XDR tuning, IDS/IPS signatures, cloud-native detection, OT/DCI monitoring, and MITRE ATT&CK mapping
verifiedStrong skills in tooling (SIEM, SOAR, EDR, network telemetry), telemetry normalization, analytic validation, and creating decision-grade dashboards and runbooks
verifiedExcellent written and verbal communication for briefings to technical and executive audiences

Nice to Have

Prior DoD/Army/ARNG SOC or NOSC experience; Experience with threat emulation frameworks, Purple Teaming, SOAR playbook development, cloud detection platforms, and telemetry engineering; Familiarity with CDAP/CHAP assessment processes and compliance/audit evidence requirements; CISSP-ISSAP, CISSP-ISSEP, GCIA, GICSP, or equivalent advanced detection/forensics certifications.

Benefits & Perks

check_circleMedical, dental, and vision insurancecheck_circleLife insurancecheck_circleHealth savings accountcheck_circleParental leave401(k) retirement plan

Skills, education and keywords

Skills: Mitre Att&ck, Siem, Soar, Edr, XDR, Ids/ips, Ot, Dci, Cloud-Native Detection, Telemetry Normalization.

Education: Master's or Ph.D. in specified fields required; Master's or Ph.D. in specified fields required.

Frequently asked questions about Detection & Case Management Lead with Security Clearance at Peraton

What does a Detection & Case Management Lead with Security Clearance at Peraton do?expand_more

Day-to-day, the Detection & Case Management Lead with Security Clearance at Peraton will define and govern detection architecture standards and lifecycle for correlation rules and analytics pipelines; translate threat intelligence and vulnerability findings into prioritized detection use cases and automated alerting frameworks; oversee detection validation using telemetry analysis, adversary emulation, and red-team exercises to reduce false positives; and lead end-to-end case management design including triage, enrichment, escalation, remediation tracking, and closure processes.

What are the requirements for this Detection & Case Management Lead with Security Clearance role?expand_more

To qualify for the Detection & Case Management Lead with Security Clearance at Peraton position, applicants should have: 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD; TS/SCI (active) clearance; Master's or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR Relevant DoD/Military training (e.g., 4C-255N) OR Relevant certifications; Progressive cybersecurity experience focused on detection engineering, SOC operations, or security case management; Demonstrated expertise in SIEM rule engineering, EDR/XDR tuning, IDS/IPS signatures, cloud-native detection, OT/DCI monitoring, and MITRE ATT&CK mapping; and Strong skills in tooling (SIEM, SOAR, EDR, network telemetry), telemetry normalization, analytic validation, and creating decision-grade dashboards and runbooks.

Where is the Detection & Case Management Lead with Security Clearance role at Peraton located?expand_more

Detection & Case Management Lead with Security Clearance at Peraton is based in 904, McDaniel Court, Herndon, Fairfax County, Virginia, 20170, United States. This is a on-site role.

Is this Detection & Case Management Lead with Security Clearance job remote, hybrid, or on-site?expand_more

Peraton has listed this Detection & Case Management Lead with Security Clearance role as on-site.

How much experience is required for this Detection & Case Management Lead with Security Clearance role?expand_more

Detection & Case Management Lead with Security Clearance at Peraton typically requires 5+ years of relevant experience at the lead level.

What skills do you need for the Detection & Case Management Lead with Security Clearance role at Peraton?expand_more

Key skills for Detection & Case Management Lead with Security Clearance at Peraton include Mitre Att&ck; Siem; Soar; Edr; XDR; Ids/ips; Ot; and Dci.

What education is required for Detection & Case Management Lead with Security Clearance at Peraton?expand_more

Educational requirements for this role: Master's or Ph.D. in specified fields required; and Master's or Ph.D. in specified fields required.

What category does the Detection & Case Management Lead with Security Clearance role belong to?expand_more

Detection & Case Management Lead with Security Clearance at Peraton is part of the it job category on Recrutus.

Detection & Case Management Lead with Security Clearance