Hybrid Security & Vulnerability Management Engineer – DC

Peraton; Washington; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Peraton seeks a Security and Vulnerability Management Engineer in Washington, DC for a ~9‑month contract. Role requires on‑site work Monday through Wednesday with up to two remote days per week, and eligibility for Tier 2 Public Trust clearance.

You will drive vulnerability assessments, remediation governance, and security posture improvements across on‑premises, cloud, and VDI environments. Responsibilities include building risk-based prioritization, tuning Nessus and patching programs,

Qualifications

• Bachelor's degree required with 8+ years of related experience
• Hands-on vulnerability assessments delivering validated findings with evidence

Responsibilities

• Conduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, network devices, databases, VDI, and cloud workloads
• Build a risk-based prioritization matrix using CVSS, asset criticality, and real-world exploitability
• Tune Nessus scanning program and close coverage gaps across on-prem, cloud, and VDI environments
• Correlate findings with Microsoft Sentinel and Varonis; suppress false positives
• Lead remediation governance with ownership models, SLAs, and change workflows
• Drive backlog reduction with root-cause analysis and targeted remediation plans
• Coordinate remediation with system owners and document retest outcomes
• Develop dashboards for MTTR, aging, backlog burn-down, and patch compliance
• Design endpoint patch deployment rings and automation using SCCM, Ivanti, and Jamf
• Create risk-based patching plans for Windows and Linux servers; document rollback procedures
• Support business continuity and disaster recovery documentation related to patching
• Review Check Point configurations and implement hardened policies
• Tune Defender policies for Windows and macOS against NIST 800-53 Rev.5; pilot before enterprise rollout
• Perform network analysis of firewall rules, DNS, routing, and cloud network configurations
• Review cloud security posture in AWS/Azure and network segmentation
• Assess Entra ID/AD architecture; enhance Conditional Access and MFA coverage
• Support penetration testing and red team exercises; produce Security Assessment Reports
• Author runbooks, SOPs, and change documentation; enable knowledge transfer
• Deliver weekly and monthly security reports and critical vulnerability notifications

Skills

Vulnerability management

Risk-based prioritization

Nessus

Microsoft Defender

Check Point

SIEM (Microsoft Sentinel)

IAM (Conditional Access, PIM, MFA)

Scripting (Python/PowerShell)

Change management

Windows/Linux patching

Education

Bachelor's degree in CS/IS or related field

Tools

Nessus

Burp Suite

Nmap

Kali Linux

Microsoft Configuration Manager

Ivanti

Jamf

Splunk

Microsoft Sentinel

Varonis

Job description

Peraton seeks a Security and Vulnerability Management Engineer in Washington, DC for a ~9‑month contract. Role requires on‑site work Monday through Wednesday with up to two remote days per week, and eligibility for Tier 2 Public Trust clearance.

You will drive vulnerability assessments, remediation governance, and security posture improvements across on‑premises, cloud, and VDI environments. Responsibilities include building risk-based prioritization, tuning Nessus and patching programs,