Hands-On Security & Vulnerability Engineer (Hybrid)

Peraton; Washington; Hybrid; USD 110,000 - 165,000; Full time

Job summary

Peraton is seeking an experienced Security & Vulnerability Management Engineer to drive critical cybersecurity improvements within a hybrid federal enterprise environment in Washington, DC. You will own and execute ten security projects spanning vulnerability management, patching, endpoint protection, and governance.

The role requires hands-on configuration, testing, validation, and documentation of security controls, with RMF and NIST 800-53 guidance guiding the work.

Qualifications

• Experience conducting authenticated and unauthenticated vulnerability assessments across enterprise IT assets.
• Hands-on ability to implement remediation and hardening changes for security programs.
• Knowledge of risk-based prioritization using CVSS and asset criticality.
• Experience building governance frameworks, SLAs, and remediation tracking.
• Proven ability to drive technical security improvements within RMF/NIST frameworks.

Responsibilities

• Conduct vulnerability assessments across servers, endpoints, network devices, SQL Server, VDI, and cloud workloads.
• Directly implement and validate remediation activities, including secure configuration changes and hardening.
• Develop a risk-based vulnerability prioritization matrix using CVSS ratings and exploitability.
• Establish vulnerability remediation governance framework with ownership models and SLAs.
• Deliver a formal Vulnerability Remediation Governance Plan within 60 days.
• Configure Nessus, SIEM integrations (e.g., Microsoft Sentinel, Splunk) and dashboards.
• Lead patch management for Windows and Linux servers and coordinate change processes.
• Configure and harden firewall, network, and cloud security controls including Check Point environments.

Skills

Vulnerability assessment

Remediation

Governance

SIEM correlation

Patch management

Endpoint security

Firewall configuration

Network security

Cloud security

Tools

Tenable Nessus

Microsoft Sentinel

Splunk

Varonis

MECM

Ivanti

Jamf

Check Point firewall

SQL Server

VDI

Job description

Peraton is seeking an experienced Security & Vulnerability Management Engineer to drive critical cybersecurity improvements within a hybrid federal enterprise environment in Washington, DC. You will own and execute ten security projects spanning vulnerability management, patching, endpoint protection, and governance.

The role requires hands-on configuration, testing, validation, and documentation of security controls, with RMF and NIST 800-53 guidance guiding the work.