Network Security Engineer (Firewall & Vulnerability Management)
Peraton · Washington, DC, US
About this role
## Network Security Engineer (Firewall & Vulnerability Management) ### Overview Peraton is seeking an experienced, hands-on **Network Security Engineer (Firewall & Vulnerability Management)** for its Federal Strategic Cyber programs. This is a **project-driven engineering and implementation** role (not a traditional assessment/advisory/compliance or steady-state SOC position). You will serve as the **single dedicated technical engineering resource**, independently executing **ten security improvement projects** across areas including: - Vulnerability management - Endpoint protection - Patch management - Firewall and network security - Identity and access management - Security governance **Location:** Washington, DC **Work Arrangement:** Hybrid — on-site **Monday–Wednesday**; up to **two remote days/week** **Security Requirement:** **Tier 2 Public Trust** ### Key Responsibilities - **Vulnerability Assessment, Remediation & Governance** - Conduct authenticated and unauthenticated vulnerability assessments across enterprise servers, endpoints, network devices, SQL Server, VDI, and AWS/Azure workloads. - Implement and validate approved remediation (secure configuration changes, hardening, vulnerability resolution). - Build a risk-based vulnerability prioritization matrix using **CVSS**, asset criticality, and exploitability. - Establish vulnerability remediation governance (ownership models, SLA targets, closure standards, escalation workflows). - Deliver a **Vulnerability Remediation Governance Plan within the first 60 days**. - Reduce vulnerability backlog via root-cause analysis, targeted remediation plans, direct technical remediation, and burn-down tracking. - **Vulnerability Scanning Optimization & SIEM Correlation** - Configure, tune, and optimize **Tenable Nessus** scanning policies and infrastructure. - Troubleshoot credentialed scan failures and eliminate scanning coverage gaps across on-prem, cloud, and VDI. - Correlate findings with **Microsoft Sentinel**, **Varonis**, and **Splunk** to validate results and suppress false positives. - Create dashboards/metrics for technical and executive audiences (e.g., **MTTR**, vulnerability aging, patch compliance, security exception tracking). - **Endpoint Security & Server Patch Management** - Configure and optimize patch management using **Microsoft Endpoint Configuration Manager (MECM)**, **Ivanti**, and **Jamf**. - Design patch deployment rings, maintenance windows, and automated patching workflows. - Execute risk-based Windows and Linux patching plans. - Implement endpoint/server security hardening to address vulnerabilities and configuration weaknesses. - Prepare and track change requests (procedures, testing/validation, rollback documentation). - Update business continuity/disaster recovery documentation related to patching. - **Firewall, Network & Cloud Security Engineering** - Directly configure, implement, and harden enterprise firewall policies (misconfigurations, overly permissive rules, deprecated objects, unnecessary access) through approved change control. - Work within the customer’s **Check Point** firewall environment to assess, configure, troubleshoot, and validate improvements. - Apply hands-on firewall engineering experience with **Check Point**, **Palo Alto Networks**, or **Cisco**. - Configure and tune **Microsoft Defender** security policies for Windows and macOS aligned to **NIST SP 800-53 Rev. 5**. - Implement ne
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.