{"id":2955873,"url":"https://alion.io/job/peraton-security-and-vulnerability-management-engineer","title":"Security and Vulnerability Management Engineer","company":{"id":722,"name":"Peraton","domain":"peraton.com","url":"https://alion.io/company/peraton","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":10,"ghost_share":0,"stale_share":0,"repost_share":0.1,"time_to_fill_p50_days":10,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":112000,"max":179000,"currency":"USD","period":"year","gross":null,"usd_annual":179000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"C#","optional":false},{"name":"CVSS","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MS SQL","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-20T21:29:16Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T10:15:00Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Responsibilities\nSecurity and Vulnerability Management Engineer\nLocation: Washington, DC - on site Monday, Tuesday, and Wednesday, with up to two remote days per week\nSuitability: Must be able to obtain and maintain a Tier 2 Public Trust security clearance\nTravel: Periodic local travel to an alternate computing facility in the DC metro area\n Engagement for this assigned work: Full-time position, approximately 9 months (November 2026 - July 2027).\nResponsibilities\nConduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, network devices, Microsoft SQL Server instances, VDI, and AWS and Azure cloud workloads, delivering validated findings with reproducible steps and supporting evidence.\nBuild and maintain a risk-based prioritization matrix using CVSS severity, asset criticality, and real-world exploitability mapping, with supporting asset inventory and scan coverage records.\nOptimize the Nessus scanning program: tune scan policies, resolve credentialed-scan failures, refine scheduling, and close coverage gaps across on-premises, cloud, and VDI environments.\nCorrelate findings against Microsoft Sentinel and Varonis, with Splunk secondarily, to validate results and systematically suppress false positives.\nStand up and run the remediation governance framework: ownership and accountability model, risk-based prioritization, SLA targets, closure standards, and escalation workflows. An initial Governance and Process Improvement Plan is due within 60 days of start.\nDrive the vulnerability backlog reduction initiative: analyze root causes of deferred findings, build targeted remediation plans, and track burn-down to closure.\nCoordinate remediation with system owners, validate and retest fixes, and document retest outcomes.\nPerform structured root cause analysis on recurring vulnerability patterns and implement corrective and preventive process and tooling improvements with named owners and target dates.\nBuild dashboards and metrics for technical and executive audiences, including MTTR, aging, backlog burn-down, patch compliance percentage, and exception tracking.\nDesign and improve endpoint patch deployment rings, maintenance windows, and automation using Microsoft Configuration Manager, Ivanti, and Jamf, and produce compliance metrics.\nDevelop risk-based Windows and Linux server patching plans and workflows, submit and track formal change requests, validate results, and document rollback procedures.\nSupport critical service continuity, including updates to business continuity and disaster recovery documentation as it relates to patching and critical systems.\nReview Check Point configurations to identify misconfigurations, overly permissive rules, and deprecated policy objects; implement hardened configurations through approved change management and produce validation documentation.\nReview and tune Microsoft Defender policies for Windows and macOS against NIST SP 800-53 Rev. 5, including Jamf-managed macOS device compliance, with pilot testing before enterprise rollout.\nPerform network-layer analysis across firewall rule sets, ACLs, NAT, DNS dependency chains, routing logic, and segmentation; review VPN, proxy filtering, and IPS/IDS configurations; troubleshoot identity and access paths.\nConduct AWS and Azure cloud and network security posture reviews, including network segmentation and ZTNA gateway review.\nReview Entra ID and Active Directory Domain Services architecture, enhance Conditional Access policies, and assess PIM and MFA enforcement coverage and gaps.\nSupport penetration testing and red team exercises, and produce formal Security Assessment Reports containing scope, findings, evidence, impact, recommendations, proof-of-concept reproduction steps, and retest results.\nAuthor runbooks, playbooks, SOPs, secure configuration references, change implementation documentation, and knowledge transfer documentation. Technical writing is a functional requirement of this role, not a secondary skill.\nDeliver weekly status reports covering tasks, blockers, risks, and after-hours work; monthly vulnerability management, endpoint patch compliance, and server patching and change request reports; security assessment reports following each assessment; and critical vulnerability notifications within the timeframe specified by the Customer.\nPerform after-hours work as needed for patching windows, assessments, policy changes, incident response, and critical vulnerability response.\nTravel periodically to the Customer's alternate computing facility in the DC metro area as directed. Local travel is not separately reimbursed.\nQualifications\nBasic Qualifications\nBachelor's degree and 8 years of relevant experience, master's degree and 6 years, or 12 years of experience in lieu of a degree.Minimum of 5 years of hands-on experience is required regardless of degree path.\n\n5+ years of hands-on experience delivering enterprise-scale cybersecurity projects spanning vulnerability assessment, remediation planning, endpoint security, system hardening, and penetration testing.\nDemonstrated authenticated and unauthenticated vulnerability assessments producing validated, evidence-based findings.\nStrong working knowledge of NIST SP 800-53 Rev. 5, NIST RMF, defense-in-depth, Zero Trust, and IRS Publication 1075.\nHands-on remediation and patching across Windows Server, Linux, and Microsoft SQL Server; AWS and Azure administration sufficient to perform cloud posture review.\nCheck Point firewall and endpoint policy administration.\nMicrosoft Defender policy administration for both Windows and MacOS.\nProficiency with Nessus, Burp Suite, Nmap, and Kali Linux or equivalents.\nNetwork analysis across segmentation, firewall rules, DNS dependencies, routing logic, and cloud network configurations.\nIAM security experience including Conditional Access, PIM, and MFA enforcement.\nSIEM correlation using Microsoft Sentinel, Varonis, or equivalent.\nScripting in Python, PowerShell, or C#.\nPatch tooling experience with Microsoft Configuration Manager, Ivanti, or Jamf.\nEnterprise virtualization and VDI experience.\nFormal change management experience building, submitting, and tracking change requests with validation and rollback planning.\nAbility to independently plan, execute, document, and validate technical deliverables to acceptance, with reproducible steps and retest results, without significant rework cycles.\nAbility to obtain and maintain Tier 2 Public Trust, including credit check, FBI criminal history check, and in-person fingerprinting at a designated federal facility in Washington, DC. Typical processing is 60 to 120 days.\nWillingness to complete IRS Publication 1075 Federal Tax Information training prior to system access if assigned to FTI-connected systems.\nAbility to work on site in Washington, DC Monday through Wednesday and support after-hours activity.\nImmediate availability; anticipated start on or about November 1, 2026.\nU.S. citizenship required.\nMust be able to obtain and maintain a Tier 2 Public Trust clearance.\nPreferred Qualifications\nBachelor's degree in IT, Computer Science, Cybersecurity, or a related field.\nCISSP, CISM, GIAC, OSCP, CEH, Security+, AWS Certified Security - Specialty, or Microsoft security certifications such as AZ-500 Security Engineer Associate. All certifications are preferred; none are mandatory for this position.\nSOC operations, incident response, or red team experience.\nSocial engineering and physical security testing experience.\nVulnerability management metrics, dashboards, and executive risk reporting.\nAutomation scripting, playbook development, and workflow integration.\nZero Trust network architecture, NAC/ISE review, and IPS/IDS tuning.\nRemediation runbooks, secure configuration baselines, and hardening standards.\nPrior federal agency or IRS Publication 1075 environment experience.\nLocated in the Washington, DC metropolitan area.\nPeraton Overview\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\nTarget Salary Range\n$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEO\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.","description_format":"text","description_chars":9377,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-20T21:29:16Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":10,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":179000,"is_top_pay":true},"html_url":"https://alion.io/job/peraton-security-and-vulnerability-management-engineer","json_url":"https://alion.io/job/peraton-security-and-vulnerability-management-engineer.json","meta":{"generated_at":"2026-10-21T13:25:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19006,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":722},"rest":"https://alion.io/mcp/rest/get_company?id=722"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fperaton-security-and-vulnerability-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fperaton-security-and-vulnerability-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fperaton-security-and-vulnerability-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/peraton-security-and-vulnerability-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fperaton-security-and-vulnerability-management-engineer"}]}