Network Security Engineer – Firewall & Vulnerability Management

Peraton

. Execute ten security improvement projects across vulnerability management, endpoint protection, patch management, firewall and network security, identity and access management, and security governance .

Posted 10/28/2026full-timeUnited StatesSeniorLead💰 $135,000 - $216,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in enterprise cybersecurity, focusing on vulnerability assessment, endpoint security, and system hardening. Proficient in implementing and managing security technologies, conducting vulnerability remediation, and developing comprehensive security documentation.

Highest-signal resume keywords

Vulnerability AssessmentEndpoint SecurityEnterprise Firewall ConfigurationMicrosoft DefenderTenable Nessus

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementSystem HardeningPenetration TestingSecurity Configuration ChangesPatch ManagementScripting with PythonScripting with PowerShellScripting with C#Cloud Security (AWS/Azure)Network Segmentation

Soft Skills

Technical WritingEffective CommunicationIndependent ExecutionProject Management

Tools & Technologies

Check PointPalo Alto NetworksCiscoMicrosoft Entra IDActive DirectoryMECMIvantiJamfMicrosoft SentinelVaronis

Certifications & Qualifications

Bachelor's DegreeTier 2 Public Trust Background Investigation

Industry Keywords

NIST SP 800-53Zero Trust Security PrinciplesIRS Publication 1075Vulnerability Remediation GovernanceChange Management

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSJamfLinuxMacOSPythonSplunkSQL

About the role

Key responsibilities & impact

Execute ten security improvement projects across vulnerability management, endpoint protection, patch management, firewall and network security, identity and access management, and security governance
Conduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, network devices, SQL Server, VDI, and AWS/Azure workloads
Implement and validate secure configuration changes, system hardening, vulnerability remediation, and technical security improvements
Develop vulnerability prioritization matrices, remediation governance frameworks, SLA targets, ownership models, closure standards, and escalation workflows
Deliver a formal Vulnerability Remediation Governance Plan within the first 60 days
Drive vulnerability backlog reduction through root cause analysis, targeted remediation, direct technical remediation, and burn-down tracking
Configure, tune, and optimize Tenable Nessus scanning policies and infrastructure
Troubleshoot credentialed-scan failures and eliminate scanning coverage gaps
Correlate vulnerability findings with Microsoft Sentinel, Varonis, and Splunk
Develop dashboards and metrics for MTTR, vulnerability aging, patch compliance, and security exception tracking
Configure and optimize patch management using MECM, Ivanti, and Jamf
Design patch deployment rings, maintenance windows, and automated patching workflows
Develop and execute Windows and Linux server patching plans
Implement endpoint and server hardening measures
Prepare, submit, and track formal change requests with testing, validation, and rollback documentation
Update business continuity and disaster recovery documentation for patch management
Configure, implement, and harden enterprise firewall policies in the customer's Check Point environment
Remediate firewall misconfigurations, overly permissive rules, deprecated objects, and unnecessary access permissions
Configure and tune Microsoft Defender policies for Windows and macOS endpoints
Assess and improve ACLs, NAT, DNS, network segmentation, routing, VPNs, proxy services, and IPS/IDS
Review AWS and Azure cloud security posture and implement approved configuration improvements
Assess and enhance ZTNA gateway configurations
Configure and enhance Microsoft Entra ID and Active Directory controls, including Conditional Access
Assess PIM configurations and MFA enforcement
Support penetration tests and red-team exercises, including findings validation and remediation
Prepare Security Assessment Reports
Develop runbooks, playbooks, SOPs, secure configuration baselines, implementation procedures, and knowledge-transfer documentation
Deliver weekly project status reports and monthly patch compliance and vulnerability management reports
Provide critical vulnerability notifications according to customer-defined SLAs
Document security configuration changes, remediation outcomes, and technical deliverables

Requirements

What you’ll need

Bachelor's degree and 12 years of relevant experience, or an additional 4 years of experience in lieu of the bachelor's degree
Minimum of 5 years of hands-on enterprise cybersecurity experience, including vulnerability assessment, endpoint security, system hardening, and penetration testing
Experience directly configuring, implementing, hardening, troubleshooting, and validating enterprise security technologies and controls
Ability to independently execute technical security improvement initiatives from assessment and design through implementation, validation, and documentation
Experience performing security configuration changes and remediation activities within production enterprise environments
Hands-on enterprise firewall configuration and implementation experience with Check Point, Palo Alto Networks, or Cisco technologies
Experience configuring, modifying, implementing, troubleshooting, and validating firewall security policies, rules, access controls, and hardening measures
Experience with Microsoft Defender, Tenable Nessus, MECM, Ivanti, Jamf, Microsoft Entra ID, and Active Directory
Experience with Conditional Access, PIM, MFA, vulnerability remediation governance, patching workflows, change management, runbooks, SOPs, and secure configuration documentation
Working knowledge of NIST SP 800-53 Revision 5, NIST RMF, Zero Trust security principles, and IRS Publication 1075
Experience with Microsoft Sentinel, Varonis, or Splunk
Hands-on scripting experience with Python, PowerShell, or C#
Experience with firewall rules, network segmentation, DNS, routing, cloud networking, and hybrid on-premises/AWS/Azure environments
Must be a U.S. citizen
Must meet requirements for a Tier 2 Public Trust background investigation
Must work on-site in Washington, DC, Monday through Wednesday, with up to two remote workdays per week
Ability to work independently, manage multiple technical deliverables, and communicate effectively with technical and customer stakeholders
Strong technical writing and documentation skills

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Health savings account
Short-term disability
Long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Potential eligibility for overtime
Potential eligibility for shift differential
Potential eligibility for a discretionary bonus