Onsite DC Cyber Vulnerability & Remediation Engineer

Peraton; Washington (District of Columbia); On-site; USD 112,000 - 179,000; Full time

Job summary

Peraton is seeking a Security and Vulnerability Management Engineer in Washington, DC, to lead vulnerability assessments, patching, and security governance across on-prem, cloud, and VDI environments. You will implement risk-based remediation plans, coordinate with system owners, and drive metrics for executive reporting.

The role requires hands-on expertise with Nessus, SIEM integrations, and patch management tools, plus the ability to obtain a Tier 2 Public Trust clearance.

Qualifications

• Experience delivering enterprise-scale cybersecurity projects across vulnerability assessment and remediation.
• Strong knowledge of NIST SP 800-53 Rev. 5 and RMF.
• Hands-on patching across Windows, Linux, and SQL Server, with cloud posture review.
• Ability to obtain and maintain Tier 2 Public Trust clearance.
• On-site in Washington, DC with occasional after-hours and travel.

Responsibilities

• Conduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, network devices, SQL Server, VDI, and cloud workloads; provide validated findings with reproducible steps.
• Build a risk-based prioritization matrix using CVSS, asset criticality, and real-world exploitability; maintain asset inventory and scan coverage records.
• Optimize Nessus scanning: tune policies, resolve credentialed-scan failures, refine scheduling, close coverage gaps across on-prem, cloud, and VDI.
• Correlate findings with Microsoft Sentinel and Varonis (and Splunk secondarily) to validate results and suppress false positives.
• Stand up and run remediation governance: ownership model, SLA targets, closure standards, escalation workflows; initial Plan due within 60 days.
• Drive backlog reduction: analyze root causes, build remediation plans, and track burn-down to closure.
• Coordinate remediation with system owners; validate fixes and document retest outcomes.
• Perform root-cause analysis on recurring vulnerabilities; implement corrective and preventive actions with owners and dates.
• Build dashboards and metrics for technical and executive audiences (MTTR, aging, backlog burn-down, patch compliance).
• Design and improve patch deployment rings, maintenance windows, and automation with SCCM, Ivanti, Jamf; produce compliance metrics.
• Develop risk-based Windows/Linux server patching plans and change requests; validate results and document rollback procedures.
• Support business continuity and disaster recovery documentation related to patching and critical systems.
• Review Check Point configurations for misconfigurations; implement hardened configurations with change management; document validation.
• Review and tune Defender policies for Windows and macOS against NIST; pilot tests before enterprise rollout.
• Network-layer analysis across firewall rules, DNS dependencies, routing, and cloud configs; review VPN/proxy/IPS-IDS; troubleshoot access paths.
• Conduct cloud security posture reviews (AWS, Azure) including segmentation and ZTNA gateway review.
• Review Entra ID and AD architecture; enhance Conditional Access, PIM, and MFA coverage.
• Support penetration testing and red team exercises; produce Security Assessment Reports with scope, findings, evidence, and retest results.
• Author runbooks, SOPs, secure configuration references, change docs; technical writing is required.
• Deliver weekly status reports; monthly vulnerability/patching/assessment reports; critical vulnerability notifications within customer-specified timelines.
• Occasional after-hours work for patching windows, assessments, policy changes, and incident response.
• Travel periodically to alternate computing facilities in DC metro area as directed.

Skills

Vulnerability assessments

Security governance

SIEM analysis

Policy & change management

Education

Bachelor's degree or higher in IT, Cybersecurity, or related field

Tools

Nessus

Burp Suite

Nmap

Kali Linux

Microsoft Configuration Manager

Ivanti

Jamf

Microsoft Defender

Job description

Peraton is seeking a Security and Vulnerability Management Engineer in Washington, DC, to lead vulnerability assessments, patching, and security governance across on-prem, cloud, and VDI environments. You will implement risk-based remediation plans, coordinate with system owners, and drive metrics for executive reporting.

The role requires hands-on expertise with Nessus, SIEM integrations, and patch management tools, plus the ability to obtain a Tier 2 Public Trust clearance.