External Job Posting Title Security & Vulnerability Management Engineer

Peraton; Washington; Hybrid; USD 110,000 - 165,000; Full time

Job summary

Peraton is seeking an experienced Security & Vulnerability Management Engineer to drive critical cybersecurity improvements within a hybrid federal enterprise environment in Washington, DC. You will own and execute ten security projects spanning vulnerability management, patching, endpoint protection, and governance.

The role requires hands-on configuration, testing, validation, and documentation of security controls, with RMF and NIST 800-53 guidance guiding the work.

Qualifications

• Experience conducting authenticated and unauthenticated vulnerability assessments across enterprise IT assets.
• Hands-on ability to implement remediation and hardening changes for security programs.
• Knowledge of risk-based prioritization using CVSS and asset criticality.
• Experience building governance frameworks, SLAs, and remediation tracking.
• Proven ability to drive technical security improvements within RMF/NIST frameworks.

Responsibilities

• Conduct vulnerability assessments across servers, endpoints, network devices, SQL Server, VDI, and cloud workloads.
• Directly implement and validate remediation activities, including secure configuration changes and hardening.
• Develop a risk-based vulnerability prioritization matrix using CVSS ratings and exploitability.
• Establish vulnerability remediation governance framework with ownership models and SLAs.
• Deliver a formal Vulnerability Remediation Governance Plan within 60 days.
• Configure Nessus, SIEM integrations (e.g., Microsoft Sentinel, Splunk) and dashboards.
• Lead patch management for Windows and Linux servers and coordinate change processes.
• Configure and harden firewall, network, and cloud security controls including Check Point environments.

Skills

Vulnerability assessment

Remediation

Governance

SIEM correlation

Patch management

Endpoint security

Firewall configuration

Network security

Cloud security

Tools

Tenable Nessus

Microsoft Sentinel

Splunk

Varonis

MECM

Ivanti

Jamf

Check Point firewall

SQL Server

VDI

Job description

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Responsibilities

Peraton is currently hiring an experienced Security & Vulnerability Management Engineer with hands‑on experience implementing security configurations for its’ Federal Strategic Cyber programs.

Location: Washington, DCWork Arrangement: Hybrid – On‑site Monday through Wednesday; up to two remote days per weekSecurity Requirement: Tier 2 Public Trust

Position Overview

We are seeking an experienced, hands‑on Security & Vulnerability Management Engineer to execute critical cybersecurity improvement initiatives within a hybrid Microsoft, AWS, and Azure federal enterprise environment.

• This is a project‑driven cybersecurity engineering and implementation position, not a traditional security assessment, advisory, compliance, or steady‑state security operations role.
• Serving as the single dedicated technical engineering resource, the selected candidate will independently execute ten security improvement projects spanning vulnerability management, endpoint protection, patch management, firewall and network security, identity and access management, and security governance.
• The successful candidate must demonstrate experience personally configuring, implementing, hardening, troubleshooting, and validating enterprise security technologies and controls. Responsibilities extend beyond identifying vulnerabilities and recommending corrective actions to directly implement approved security configuration changes, executing technical remediation, optimizing security platforms, and delivering measurable improvements to the organization's security posture.
• The engineer will take ownership of technical deliverables from initial assessment and solution design through implementation, testing, validation, documentation, and completion. The customer retains responsibility for risk acceptance and policy approvals, while the engineer is accountable for executing approved technical security improvements.
• The environment operates under federal cybersecurity requirements, including IRS Publication 1075, NIST SP 800‑53 Revision 5, and the NIST Risk Management Framework (RMF).

Key Responsibilities

Vulnerability Assessment, Remediation & Governance

• Conduct authenticated and unauthenticated vulnerability assessments across enterprise servers, endpoints, network devices, SQL Server, virtual desktop infrastructure (VDI), and AWS/Azure workloads.
• Directly implement and validate technical remediation activities, including secure configuration changes, system hardening, and vulnerability resolution.
• Develop a risk‑based vulnerability prioritization matrix incorporating Common Vulnerability Scoring System (CVSS) ratings, asset criticality, and exploitability.
• Establish a comprehensive vulnerability remediation governance framework, including ownership models, service‑level agreement (SLA) targets, remediation closure standards, and escalation workflows.
• Deliver a formal Vulnerability Remediation Governance Plan within the first 60 days.
• Drive vulnerability backlog reduction through root cause analysis of deferred findings, targeted remediation plans, direct technical remediation, and measurable burn‑down tracking.

Vulnerability Scanning Optimization & SIEM Correlation

• Configure, tune, and optimize Tenable Nessus vulnerability scanning policies and infrastructure.
• Troubleshoot and resolve credentialed‑scan failures and eliminate scanning coverage gaps across on‑premises, cloud, and VDI environments.
• Correlate vulnerability findings with Microsoft Sentinel, Varonis, and Splunk to validate results, identify discrepancies, and suppress false positives.
• Implement improvements to vulnerability scanning accuracy, effectiveness, and reporting.
• Develop and maintain dashboards and metrics for technical and executive audiences, including:
• Mean Time to Remediate (MTTR)
• Vulnerability aging
• Patch compliance
• Security exception tracking

Endpoint Security & Server Patch Management

• Configure, implement, and optimize enterprise patch management solutions using Microsoft Endpoint Configuration Manager (MECM), Ivanti, and Jamf.
• Design and implement patch deployment rings, maintenance windows, and automated patching workflows.
• Develop and execute risk‑based Windows and Linux server patching plans.
• Implement endpoint and server security hardening measures to address identified vulnerabilities and configuration weaknesses.
• Prepare, submit, and track formal change requests, including implementation procedures, testing, validation, and rollback documentation.
• Update business continuity and disaster recovery documentation related to patch management activities.

Firewall, Network & Cloud Security Engineering

• Directly configure, implement, and harden enterprise firewall security policies, including remediation of misconfigurations, overly permissive rules, deprecated objects, and unnecessary access permissions through approved change‑control procedures.
• Work within the customer's existing Check Point firewall environment