{"id":3180601,"url":"https://alion.io/job/peraton-security-vulnerability-management-engineer","title":"Security & Vulnerability Management Engineer","company":{"id":722,"name":"Peraton","domain":"peraton.com","url":"https://alion.io/company/peraton","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":14,"ghost_share":0,"stale_share":0,"repost_share":0.071,"time_to_fill_p50_days":10,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135000,"max":216000,"currency":"USD","period":"year","gross":null,"usd_annual":216000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CVSS","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Nessus","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-23T21:23:06Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-26T08:08:34Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Peraton Overview\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\nResponsibilities\nPeraton is currently hiring an experienced Security & Vulnerability Management Engineer with hands-on experience implementing security configurations for its’ Federal Strategic Cyber programs.\nLocation: Washington, DCWork Arrangement: Hybrid - On-site Monday through Wednesday; up to two remote days per weekSecurity Requirement: Tier 2 Public Trust\nPosition Overview\nWe are seeking an experienced, hands-on Security & Vulnerability Management Engineer to execute critical cybersecurity improvement initiatives within a hybrid Microsoft, AWS, and Azure federal enterprise environment.\nThis is a project-driven cybersecurity engineering and implementation position, not a traditional security assessment, advisory, compliance, or steady-state security operations role.\nServing as the single dedicated technical engineering resource, the selected candidate will independently execute ten security improvement projects spanning vulnerability management, endpoint protection, patch management, firewall and network security, identity and access management, and security governance.\nThe successful candidate must demonstrate experience personally configuring, implementing, hardening, troubleshooting, and validating enterprise security technologies and controls. Responsibilities extend beyond identifying vulnerabilities and recommending corrective actions to directly implement approved security configuration changes, executing technical remediation, optimizing security platforms, and delivering measurable improvements to the organization's security posture.\nThe engineer will take ownership of technical deliverables from initial assessment and solution design through implementation, testing, validation, documentation, and completion. The customer retains responsibility for risk acceptance and policy approvals, while the engineer is accountable for executing approved technical security improvements.\nThe environment operates under federal cybersecurity requirements, including IRS Publication 1075, NIST SP 800-53 Revision 5, and the NIST Risk Management Framework (RMF).\nKey Responsibilities\nVulnerability Assessment, Remediation & Governance\nConduct authenticated and unauthenticated vulnerability assessments across enterprise servers, endpoints, network devices, SQL Server, virtual desktop infrastructure (VDI), and AWS/Azure workloads.\nDirectly implement and validate technical remediation activities, including secure configuration changes, system hardening, and vulnerability resolution.\nDevelop a risk-based vulnerability prioritization matrix incorporating Common Vulnerability Scoring System (CVSS) ratings, asset criticality, and exploitability.\nEstablish a comprehensive vulnerability remediation governance framework, including ownership models, service-level agreement (SLA) targets, remediation closure standards, and escalation workflows.\nDeliver a formal Vulnerability Remediation Governance Plan within the first 60 days.\nDrive vulnerability backlog reduction through root cause analysis of deferred findings, targeted remediation plans, direct technical remediation, and measurable burn-down tracking.\nVulnerability Scanning Optimization & SIEM Correlation\nConfigure, tune, and optimize Tenable Nessus vulnerability scanning policies and infrastructure.\nTroubleshoot and resolve credentialed-scan failures and eliminate scanning coverage gaps across on-premises, cloud, and VDI environments.\nCorrelate vulnerability findings with Microsoft Sentinel, Varonis, and Splunk to validate results, identify discrepancies, and suppress false positives.\nImplement improvements to vulnerability scanning accuracy, effectiveness, and reporting.\nDevelop and maintain dashboards and metrics for technical and executive audiences, including:\nMean Time to Remediate (MTTR)\nVulnerability aging\nPatch compliance\nSecurity exception tracking\nEndpoint Security & Server Patch Management\nConfigure, implement, and optimize enterprise patch management solutions using Microsoft Endpoint Configuration Manager (MECM), Ivanti, and Jamf.\nDesign and implement patch deployment rings, maintenance windows, and automated patching workflows.\nDevelop and execute risk-based Windows and Linux server patching plans.\nImplement endpoint and server security hardening measures to address identified vulnerabilities and configuration weaknesses.\nPrepare, submit, and track formal change requests, including implementation procedures, testing, validation, and rollback documentation.\nUpdate business continuity and disaster recovery documentation related to patch management activities.\nFirewall, Network & Cloud Security Engineering\nDirectly configure, implement, and harden enterprise firewall security policies, including remediation of misconfigurations, overly permissive rules, deprecated objects, and unnecessary access permissions through approved change-control procedures.\nWork within the customer's existing Check Point firewall environment to assess, configure, implement, troubleshoot, and validate security improvements.\nApply hands-on enterprise firewall engineering experience with Check Point, Palo Alto Networks, or Cisco technologies to support firewall security configuration, rule management, access controls, and system hardening.\nConfigure, implement, and tune Microsoft Defender security policies for Windows and macOS endpoints in alignment with NIST SP 800-53 Revision 5.\nAssess, troubleshoot, and implement network security configuration improvements involving:\nFirewall rule sets and access control lists (ACLs)\nNetwork Address Translation (NAT)\nDomain Name System (DNS)\nNetwork segmentation and routing\nVirtual Private Networks (VPNs)\nProxy services\nIntrusion Prevention and Detection Systems (IPS/IDS)\nConduct AWS and Azure cloud security posture reviews and implement approved security configuration improvements.\nAssess Zero Trust Network Access (ZTNA) gateway configurations and recommend and implement appropriate security enhancements.\nIdentity & Access Management (IAM)\nConfigure, implement, and enhance Microsoft Entra ID and Active Directory security controls, including Conditional Access policies.\nAssess and improve Privileged Identity Management (PIM) configurations and Multi-Factor Authentication (MFA) enforcement.\nIdentify and remediate identity and access management security gaps through approved configuration changes.\nSupport penetration testing and red team exercises, including findings validation and technical remediation.\nPrepare formal Security Assessment Reports documenting identified risks, implemented remediation measures, and remaining security considerations.\nTechnical Documentation, Reporting & Knowledge Transfer\nDevelop and maintain comprehensive technical documentation, including:\nSecurity engineering runbooks and playbooks\nStandard Operating Procedures (SOPs)\nSecure configuration baselines and references\nTechnical implementation and validation procedures\nKnowledge transfer and operational transition documentation\nPrepare and deliver weekly project status reports.\nProduce monthly patch compliance and vulnerability management reports.\nProvide critical vulnerability notifications in accordance with customer-defined SLAs.\nDocument implemented security configuration changes, remediation outcomes, and technical deliverables to support operational continuity and audit readiness.\nStrong technical writing and documentation skills are essential functional requirements of this position.\n\nQualifications\nRequired Qualifications:\nEducation & Professional Experience:\nBachelor's degree and 12 years of relevant experience. An additional 4 years of experience will be considered in lieu of the bachelor's degree.\nMust have a minimum of 5 years of hands-on enterprise cybersecurity experience, including vulnerability assessment, endpoint security, system hardening, and penetration testing.\nDemonstrated experience directly configuring, implementing, hardening, troubleshooting, and validating enterprise security technologies and controls.\nProven ability to independently execute technical security improvement initiatives from assessment and design through implementation, validation, and documentation.\nExperience performing security configuration changes and remediation activities within production enterprise environments\nTechnical Skills & Experience: Must have strong hands-on implementation experience in and with:\nFirewall Security Engineering:\nHands-on enterprise firewall configuration and implementation experience with at least one of the following technologies:\nCheck Point firewalls\nor Palo Alto Networks or Cisco - acceptable alternative\nDemonstrated experience personally configuring, modifying, implementing, troubleshooting, and validating firewall security policies, rules, access controls, and security hardening measures.\nExperience performing firewall security remediation and configuration changes within production enterprise environments using formal change-management procedures.\nAbility to apply existing firewall engineering expertise to the customer's Check Point environment.\nEndpoint Security & Vulnerability Management Tools:\nHands-on configuration and implementation experience involving:\nMicrosoft Defender: Endpoint protection configuration, policy implementation, and security tuning for Windows and macOS.\nTenable Nessus: Vulnerability scan configuration, credentialed scanning, troubleshooting, and optimization.\nMECM, Ivanti, and Jamf: Endpoint management, patch deployment, configuration management, and automation.\n Microsoft Entra ID / Active Directory: Conditional Access, Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), and identity security controls.\nVulnerability Management, Remediation & Governance:\nExperience identifying, prioritizing, and directly remediating enterprise security vulnerabilities.\nAbility to develop remediation governance frameworks, patching workflows, ownership models, and escalation procedures.\nExperience implementing and validating security hardening configurations and remediation changes.\nKnowledge of formal change-management processes, including testing, implementation, rollback planning, and documentation.\nExperience developing technical runbooks, SOPs, and secure configuration documentation.\nSecurity Frameworks & Compliance:\nWorking knowledge of:\nNIST SP 800-53 Revision 5\nNIST Risk Management Framework (RMF)\nZero Trust security principles\nIRS Publication 1075\nSecurity Monitoring & SIEM:\nExperience with at least one of the following:\nMicrosoft Sentinel\nVaronis\nSplunk\nScripting & Automation:\nHands-on scripting experience using one or more of the following:\nPython\nPowerShell\nC#\nNetwork & Cloud Security:\nExperience analyzing and implementing security configurations involving firewall rules, network segmentation, DNS, routing, and cloud networking.\nExperience supporting security engineering activities within hybrid on-premises and AWS/Azure environments.\nAbility to troubleshoot and remediate network and cloud security configuration weaknesses.\nIdentity & Access Management:\nExperience configuring and implementing Conditional Access policies.\nFamiliarity with PI...","description_format":"text","description_chars":15247,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-23T21:23:06Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":10,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":216000,"is_top_pay":true},"html_url":"https://alion.io/job/peraton-security-vulnerability-management-engineer","json_url":"https://alion.io/job/peraton-security-vulnerability-management-engineer.json","meta":{"generated_at":"2026-10-26T10:58:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":205,"day_limit":5000,"remaining_today":4795,"minute_limit":60,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":722},"rest":"https://alion.io/mcp/rest/get_company?id=722"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fperaton-security-vulnerability-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fperaton-security-vulnerability-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fperaton-security-vulnerability-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/peraton-security-vulnerability-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fperaton-security-vulnerability-management-engineer"}]}