Hybrid Security & Vulnerability Management Engineer

VulnU; Washington (District of Columbia); Hybrid; USD 112,000 - 179,000; Full time

Benefits offered by this job

25 days PTO

Job summary

Peraton is seeking a Security and Vulnerability Management Engineer to conduct comprehensive vulnerability assessments across on-premises and cloud environments, including Windows, Linux, SQL Server, and VDI. The role emphasizes risk-based prioritization, remediation governance, and cross-team collaboration to improve patching and security posture.

The position requires strong experience with Nessus, SIEM integration, and secure configuration practices, with on-site work in Washington, DC, and

Qualifications

• Bachelor's degree required with extensive hands-on cybersecurity project experience.
• Minimum of 5 years delivering enterprise-scale vulnerability management and remediation projects.
• Experience with NIST SP 800-53 Rev. 5, RMF, Zero Trust, and related frameworks.

Responsibilities

• Conduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, networks, databases, and cloud workloads.
• Build and maintain a risk-based prioritization matrix using CVSS and asset criticality.
• Lead remediation governance, SLAs, and change control processes.

Skills

Vulnerability management

NIST SP 800-53 Rev. 5

Cloud security (AWS/Azure)

SIEM (Microsoft Sentinel, Varonis)

Patching/tools (SCCM, Ivanti, Jamf)

Scripting (PowerShell, Python)

Education

Bachelor's degree

Tools

Nessus

Burp Suite

Nmap

Kali Linux

Microsoft Configuration Manager

Ivanti

Jamf

Splunk

Job description

Peraton is seeking a Security and Vulnerability Management Engineer to conduct comprehensive vulnerability assessments across on-premises and cloud environments, including Windows, Linux, SQL Server, and VDI. The role emphasizes risk-based prioritization, remediation governance, and cross-team collaboration to improve patching and security posture.

The position requires strong experience with Nessus, SIEM integration, and secure configuration practices, with on-site work in Washington, DC, and