Federal Security & Vulnerability Engineer — Hybrid

VulnU; Washington (District of Columbia); Hybrid; USD 135,000 - 216,000; Full time

Benefits offered by this job

Paid parental leave

25 days PTO

Job summary

Peraton is seeking an experienced Security & Vulnerability Management Engineer to implement security configurations across a federal hybrid environment (Washington, DC). The role involves hands-on remediation, vulnerability management, patching, firewall and network security, IAM, and governance.

You will own technical deliverables from assessment to validation and documentation. Hybrid work arrangement: on-site Monday–Wednesday with remote days available.

Qualifications

• Bachelor's degree required; 12+ years of relevant experience considered in lieu of degree.
• Minimum 5 years of hands-on enterprise cybersecurity experience including vulnerability assessment and remediation.
• Experience configuring, implementing, hardening, and validating security controls in production environments.
• Proven ability to independently drive security improvement initiatives from assessment through documentation.

Responsibilities

• Conduct authenticated/unauthenticated vulnerability assessments across enterprise assets and cloud workloads.
• Directly implement remediation activities, hardening, and change-controlled security configurations.
• Develop risk-based vulnerability prioritization with CVSS and asset criticality.
• Lead vulnerability remediation governance, SLAs, and escalation workflows.

Skills

Vulnerability Management

Security Engineering

Endpoint Security

Cloud Security

Education

Bachelor's degree

Tools

Check Point

Palo Alto Networks

Cisco

Microsoft Defender

Nessus

MECM

Ivanti

Jamf

Microsoft Entra ID

Active Directory

Job description

Peraton is seeking an experienced Security & Vulnerability Management Engineer to implement security configurations across a federal hybrid environment (Washington, DC). The role involves hands-on remediation, vulnerability management, patching, firewall and network security, IAM, and governance.

You will own technical deliverables from assessment to validation and documentation. Hybrid work arrangement: on-site Monday–Wednesday with remote days available.