Security & Vulnerability Management Engineer

Peraton

. Execute critical cybersecurity improvement initiatives within a hybrid Microsoft, AWS, and Azure federal enterprise environment .

Posted 10/23/2026full-timeUnited StatesSeniorLead💰 $135,000 - $216,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in executing cybersecurity improvement initiatives, including vulnerability management, endpoint protection, and security governance within hybrid environments. Proficient in configuring and optimizing security technologies, developing remediation frameworks, and conducting vulnerability assessments.

Highest-signal resume keywords

Vulnerability ManagementEndpoint ProtectionSecurity GovernanceMicrosoft DefenderTenable Nessus

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentSystem HardeningPenetration TestingFirewall ConfigurationSecurity Policy ImplementationCloud Security Posture ManagementScripting with PythonScripting with PowerShellScripting with C#Change Management

Soft Skills

Effective CommunicationIndependent ExecutionProject Management

Tools & Technologies

Microsoft SentinelVaronisSplunkMECMIvantiJamfCheck PointPalo Alto NetworksCiscoMicrosoft Entra ID

Certifications & Qualifications

CISSPOSCPGIACCEHCompTIA Security+AZ-500AWS Certified Security – SpecialtyCISM

Industry Keywords

NIST SP 800-53 Revision 5Zero Trust Security PrinciplesIRS Publication 1075Federal CybersecuritySecurity Assessment Reports

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSJamfLinuxMacOSPythonSplunkSQL

About the role

Key responsibilities & impact

Execute critical cybersecurity improvement initiatives within a hybrid Microsoft, AWS, and Azure federal enterprise environment
Independently execute ten security improvement projects spanning vulnerability management, endpoint protection, patch management, firewall and network security, identity and access management, and security governance
Conduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, network devices, SQL Server, VDI, and AWS/Azure workloads
Implement and validate secure configuration changes, system hardening, and vulnerability remediation
Develop vulnerability prioritization matrices using CVSS, asset criticality, and exploitability
Establish vulnerability remediation governance frameworks, ownership models, SLA targets, closure standards, and escalation workflows
Deliver a formal Vulnerability Remediation Governance Plan within the first 60 days
Reduce vulnerability backlogs through root cause analysis, remediation plans, direct technical remediation, and burn-down tracking
Configure, tune, and optimize Tenable Nessus scanning policies and infrastructure
Troubleshoot credentialed-scan failures and eliminate scanning coverage gaps
Correlate vulnerability findings with Microsoft Sentinel, Varonis, and Splunk
Develop dashboards and metrics for MTTR, vulnerability aging, patch compliance, and security exceptions
Configure, implement, and optimize patch management using MECM, Ivanti, and Jamf
Design patch deployment rings, maintenance windows, and automated patching workflows
Develop and execute risk-based Windows and Linux server patching plans
Implement endpoint and server security hardening measures
Prepare and track formal change requests with implementation, testing, validation, and rollback documentation
Update business continuity and disaster recovery documentation for patch management
Configure, implement, and harden firewall policies in the customer’s Check Point environment
Configure and tune Microsoft Defender policies for Windows and macOS endpoints in alignment with NIST SP 800-53 Revision 5
Assess and improve ACLs, NAT, DNS, network segmentation, routing, VPNs, proxy services, and IPS/IDS
Review AWS and Azure cloud security posture and implement approved configuration improvements
Assess and improve Zero Trust Network Access gateway configurations
Configure and enhance Microsoft Entra ID and Active Directory controls, including Conditional Access
Improve PIM configurations and MFA enforcement
Support penetration testing and red team exercises through findings validation and technical remediation
Prepare formal Security Assessment Reports
Develop runbooks, playbooks, SOPs, secure configuration baselines, implementation procedures, and knowledge-transfer documentation
Deliver weekly project status reports and monthly patch compliance and vulnerability management reports
Provide critical vulnerability notifications according to customer-defined SLAs
Document security configuration changes, remediation outcomes, and technical deliverables for operational continuity and audit readiness

Requirements

What you’ll need

Bachelor's degree and 12 years of relevant experience; an additional 4 years of experience may be considered in lieu of the bachelor's degree
Minimum 5 years of hands-on enterprise cybersecurity experience, including vulnerability assessment, endpoint security, system hardening, and penetration testing
Experience directly configuring, implementing, hardening, troubleshooting, and validating enterprise security technologies and controls
Ability to independently execute technical security improvement initiatives from assessment and design through implementation, validation, and documentation
Experience performing security configuration changes and remediation activities within production enterprise environments
Hands-on enterprise firewall configuration and implementation experience with Check Point, Palo Alto Networks, or Cisco
Experience configuring, modifying, implementing, troubleshooting, and validating firewall security policies, rules, access controls, and hardening measures
Experience with Microsoft Defender, Tenable Nessus, MECM, Ivanti, and Jamf
Experience with Microsoft Entra ID / Active Directory, Conditional Access, PIM, and MFA
Experience identifying, prioritizing, and directly remediating enterprise security vulnerabilities
Experience developing remediation governance frameworks, patching workflows, ownership models, and escalation procedures
Knowledge of formal change-management processes, including testing, implementation, rollback planning, and documentation
Experience developing technical runbooks, SOPs, and secure configuration documentation
Working knowledge of NIST SP 800-53 Revision 5, NIST RMF, Zero Trust security principles, and IRS Publication 1075
Experience with Microsoft Sentinel, Varonis, or Splunk
Hands-on scripting experience using Python, PowerShell, or C#
Experience analyzing and implementing security configurations involving firewall rules, network segmentation, DNS, routing, and cloud networking
Experience supporting security engineering activities within hybrid on-premises and AWS/Azure environments
Ability to troubleshoot and remediate network and cloud security configuration weaknesses
Experience configuring Conditional Access policies and assessing/improving MFA enforcement and identity security configurations
Must be a U.S. citizen
Must meet the requirements for a Tier 2 Public Trust background investigation
Must work on-site in Washington, DC, Monday through Wednesday, with up to two remote workdays per week
Ability to work independently, manage multiple technical deliverables, and communicate effectively with technical and customer stakeholders
Preferred: certifications including CISSP, OSCP, GIAC, CEH, CompTIA Security+, AZ-500, AWS Certified Security – Specialty, or CISM
Preferred: cybersecurity engineering experience supporting federal agencies or IRS Publication 1075 environments
Preferred: SOC operations, incident response, penetration testing, or red team experience
Preferred: residency within the Washington, DC metropolitan area
Preferred: direct experience configuring and implementing security controls within Check Point firewall environments

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Health savings account
Short-term disability
Long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Potential eligibility for overtime
Potential eligibility for shift differential
Potential eligibility for a discretionary bonus