Hybrid Network Security Engineer - Firewall & Vulnerability Management

VulnU; Washington (District of Columbia); Hybrid; USD 135,000 - 216,000; Full time

Benefits offered by this job

Paid parental leave

25 days PTO

Job summary

Peraton is seeking an experienced Network Security Engineer in Washington, DC, with hands-on firewall and vulnerability management expertise. The role supports federal programs in a hybrid environment, mixing on-site and remote work days.

You will own technical deliverables from assessment through implementation, collaborating across IAM, patching, and cloud security disciplines. A strong background in Check Point, Palo Alto, and Defender suites is essential.

Qualifications

• Bachelor's degree required with 12+ years of relevant experience.
• Hands-on enterprise cybersecurity with vulnerability management and patching.
• Proven ability to configure and harden security controls in production environments.

Responsibilities

• Configure and harden firewall security policies and rules.
• Lead vulnerability remediation across on-prem, cloud, and VDI environments.
• Tune and integrate vulnerability scans with SIEM for insights and reporting.
• Manage patch deployment and server hardening across Windows and Linux.
• Produce runbooks, SOPs, and audit-ready documentation.

Skills

Firewall Security Engineering

Endpoint Security

Vulnerability Management

Cloud Security (AWS/Azure)

Security Hardening

SIEM & Monitoring

Education

Bachelor's degree

Tools

Check Point

Palo Alto Networks

Cisco

Microsoft Defender

Nessus

MECM/Ivanti/Jamf

Microsoft Entra ID/AD

Job description

Peraton is seeking an experienced Network Security Engineer in Washington, DC, with hands-on firewall and vulnerability management expertise. The role supports federal programs in a hybrid environment, mixing on-site and remote work days.

You will own technical deliverables from assessment through implementation, collaborating across IAM, patching, and cloud security disciplines. A strong background in Check Point, Palo Alto, and Defender suites is essential.