Security and Vulnerability Management Engineer
Peraton
Posted: 10/20/2026AWSAzureCloudCyber SecurityDNSJamfLinuxMacOSMS SQL Server+3 more
Information Systems Security Officer II
General Dynamics Information Technology
Posted: 10/20/2026Cyber SecurityTypeScript
Security Engineer
Ceresti Health
Posted: 10/20/2026AWSCloudDockerPythonGo
Lead Application Security Architect
FINRA
Posted: 10/20/2026Cyber SecurityMicroservices
J
Security Control Assessor, Liaison
JMA Resources
Posted: 10/20/2026Cyber SecuritySplunk
Security Engineer
Upwind Security
Posted: 10/20/2026AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesLinuxPython
Lead Security Technician
Facility Solutions Group
Posted: 10/20/2026
Staff Enterprise Security Engineer
Strava
Posted: 10/20/2026JamfLinuxMacOSPython
Security Engineer – DLP, Insider Threat
Empower
Posted: 10/20/2026AWSCloudCyber SecurityLinuxPythonSplunk
Technology Director – Cybersecurity Engineering
Wells Fargo
Posted: 10/20/2026CloudCyber SecurityMicroservicesPythonPyTorchSparkTensorflow
Security Research Manager
Bitsight
Posted: 10/20/2026
Security – Information Technology Manager
Leidos
Posted: 10/20/2026AWSCyber Security
Information Security Advisor
Elevance Health
Posted: 10/20/2026AWSAzureCloudGoogle Cloud PlatformKubernetesServiceNowSplunkTerraformVault
Cloud & AI Security Architect
Elevance Health
Posted: 10/20/2026AWSAzureCloudGoogle Cloud PlatformOracle
Security Research Manager
Bitsight
Posted: 10/20/2026
Manager, Global Security – Emergency Preparedness
Avantor
Posted: 10/20/2026AEM
Security Assurance Engineer
Chainlink Labs
Posted: 10/20/2026AWSCloudJamfPythonSplunkWeb3
Senior Navigation Engineer, Top Secret Security Clearance Required
BLUE ORIGIN
Posted: 10/20/2026PythonC++
Security Engineer
Mysten Labs
Posted: 10/20/2026PythonRustTypeScriptWeb3
Lead Security Technician
Facility Solutions Group
Posted: 10/20/2026Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in conducting vulnerability assessments, remediation planning, and endpoint security across diverse environments, including AWS and Azure. Proficient in utilizing security frameworks such as NIST SP 800-53 and managing security policies for various platforms.
Highest-signal resume keywords
Vulnerability AssessmentNIST SP 800-53 Rev. 5AWS and Azure AdministrationMicrosoft Defender Policy AdministrationNessus Proficiency
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Conduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, network devices, Microsoft SQL Server instances, VDI, and AWS and Azure cloud workloads
- Deliver validated findings with reproducible steps and supporting evidence
- Build and maintain a risk-based prioritization matrix using CVSS severity, asset criticality, and real-world exploitability mapping
- Maintain asset inventory and scan coverage records
- Optimize the Nessus scanning program by tuning scan policies, resolving credentialed-scan failures, refining scheduling, and closing coverage gaps
- Correlate findings against Microsoft Sentinel and Varonis, with Splunk secondarily, to validate results and suppress false positives
- Establish and operate a remediation governance framework with ownership, accountability, prioritization, SLA targets, closure standards, and escalation workflows
- Deliver an initial Governance and Process Improvement Plan within 60 days of start
- Drive vulnerability backlog reduction through root-cause analysis, targeted remediation plans, and burn-down tracking
- Coordinate remediation with system owners, validate and retest fixes, and document outcomes
- Implement corrective and preventive process and tooling improvements for recurring vulnerabilities
- Build dashboards and metrics for technical and executive audiences, including MTTR, aging, backlog burn-down, patch compliance, and exception tracking
- Design and improve endpoint patch deployment rings, maintenance windows, and automation using Microsoft Configuration Manager, Ivanti, and Jamf
- Develop risk-based Windows and Linux server patching plans and workflows; submit and track change requests, validate results, and document rollback procedures
- Support business continuity and disaster recovery documentation for patching and critical systems
- Review and harden Check Point configurations, including firewall rules and policy objects, through approved change management
- Review and tune Microsoft Defender policies for Windows and macOS against NIST SP 800-53 Rev. 5, including Jamf-managed macOS compliance
- Perform network-layer analysis across firewall rules, ACLs, NAT, DNS dependencies, routing, segmentation, VPN, proxy filtering, and IPS/IDS configurations
- Conduct AWS and Azure cloud and network security posture reviews, including network segmentation and ZTNA gateway review
- Review Entra ID and Active Directory Domain Services architecture; enhance Conditional Access and assess PIM and MFA enforcement
- Support penetration testing and red team exercises
- Produce formal Security Assessment Reports with scope, findings, evidence, impact, recommendations, proof-of-concept steps, and retest results
- Author runbooks, playbooks, SOPs, secure configuration references, change documentation, and knowledge transfer materials
- Deliver weekly status reports, monthly vulnerability and patch compliance reports, security assessment reports, and critical vulnerability notifications
- Perform after-hours work for patching windows, assessments, policy changes, incident response, and critical vulnerability response
- Travel periodically to the Customer's alternate computing facility in the DC metro area
Requirements
What you’ll need- Bachelor's degree and 8 years of relevant experience, master's degree and 6 years, or 12 years of experience in lieu of a degree
- Minimum of 5 years of hands-on experience regardless of degree path
- 5+ years of hands-on experience delivering enterprise-scale cybersecurity projects spanning vulnerability assessment, remediation planning, endpoint security, system hardening, and penetration testing
- Demonstrated authenticated and unauthenticated vulnerability assessments producing validated, evidence-based findings
- Strong working knowledge of NIST SP 800-53 Rev. 5, NIST RMF, defense-in-depth, Zero Trust, and IRS Publication 1075
- Hands-on remediation and patching across Windows Server, Linux, and Microsoft SQL Server
- AWS and Azure administration sufficient to perform cloud posture review
- Check Point firewall and endpoint policy administration
- Microsoft Defender policy administration for Windows and macOS
- Proficiency with Nessus, Burp Suite, Nmap, and Kali Linux or equivalents
- Network analysis across segmentation, firewall rules, DNS dependencies, routing logic, and cloud network configurations
- IAM security experience including Conditional Access, PIM, and MFA enforcement
- SIEM correlation using Microsoft Sentinel, Varonis, or equivalent
- Scripting in Python, PowerShell, or C#
- Patch tooling experience with Microsoft Configuration Manager, Ivanti, or Jamf
- Enterprise virtualization and VDI experience
- Formal change management experience building, submitting, and tracking change requests with validation and rollback planning
- Ability to independently plan, execute, document, and validate technical deliverables to acceptance, with reproducible steps and retest results
- Ability to obtain and maintain Tier 2 Public Trust, including credit check, FBI criminal history check, and in-person fingerprinting at a designated federal facility in Washington, DC
- Willingness to complete IRS Publication 1075 Federal Tax Information training prior to system access if assigned to FTI-connected systems
- Ability to work on site in Washington, DC Monday through Wednesday and support after-hours activity
- Immediate availability; anticipated start on or about November 1, 2026
- U.S. citizenship required
- Must be able to obtain and maintain a Tier 2 Public Trust clearance
- Preferred certifications include CISSP, CISM, GIAC, OSCP, CEH, Security+, AWS Certified Security – Specialty, and Microsoft security certifications such as AZ-500 Security Engineer Associate; none are mandatory
- Preferred SOC operations, incident response, or red team experience
- Preferred social engineering and physical security testing experience
- Preferred vulnerability management metrics, dashboards, and executive risk reporting
- Preferred automation scripting, playbook development, and workflow integration
- Preferred Zero Trust network architecture, NAC/ISE review, and IPS/IDS tuning
- Preferred remediation runbooks, secure configuration baselines, and hardening standards
- Preferred prior federal agency or IRS Publication 1075 environment experience
- Preferred location in the Washington, DC metropolitan area
Benefits
Comp & perks- Overtime eligibility may apply
- Shift differential may apply
- Discretionary bonus may apply
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability AssessmentRemediation PlanningEndpoint SecuritySystem HardeningPenetration TestingScripting in PythonScripting in PowerShellScripting in C#Network AnalysisIAM Security
Soft Skills
Independent PlanningExecutionDocumentationValidation
Tools & Technologies
NessusBurp SuiteNmapKali LinuxMicrosoft Configuration ManagerIvantiJamfMicrosoft SentinelVaronisCheck Point
Certifications & Qualifications
CISSPCISMGIACOSCPCEHSecurity+AWS Certified Security – SpecialtyAZ-500 Security Engineer Associate
Industry Keywords
Zero TrustDefense-in-DepthIRS Publication 1075Federal Tax InformationChange ManagementVDICloud Security PostureSecurity Assessment ReportsGovernance FrameworkPatch Compliance