Network Security Engineer (Firewall & Vulnerability Management) - Enterprise Firewall Engineering/Check Point, Endpoint Security Administration
Peraton · Washington, DC, US
About this role
## Network Security Engineer (Firewall & Vulnerability Management) ### Company Peraton — next-generation national security company providing mission-focused solutions and enterprise IT to protect U.S. agencies and allies. ### Location & Work Arrangement - **Location:** Washington, DC - **Work Arrangement:** **Hybrid** — on-site **Monday–Wednesday**, with **up to two remote days/week** - **Security Requirement:** **Tier 2 Public Trust** ### Position Overview This is a **project-driven cybersecurity engineering and implementation** role (not a traditional assessment/advisory/compliance or steady-state SOC position). You will serve as the **single dedicated technical engineering resource** executing **ten security improvement projects** across: - Vulnerability management - Endpoint protection - Patch management - Firewall & network security - Identity & access management - Security governance You will **personally configure, implement, harden, troubleshoot, and validate** enterprise security technologies and controls, taking ownership from **assessment/solution design through implementation, testing, validation, documentation, and completion**. ### Key Responsibilities **Vulnerability Assessment, Remediation & Governance** - Conduct authenticated and unauthenticated vulnerability assessments across enterprise servers, endpoints, network devices, SQL Server, VDI, and AWS/Azure workloads - Implement and validate technical remediation (secure configuration changes, hardening, vulnerability resolution) - Build a **risk-based vulnerability prioritization matrix** using **CVSS**, asset criticality, and exploitability - Establish vulnerability remediation governance (ownership models, SLA targets, closure standards, escalation workflows) - Deliver a **Vulnerability Remediation Governance Plan within the first 60 days** - Reduce backlog via root-cause analysis, targeted remediation plans, direct technical remediation, and burn-down tracking **Vulnerability Scanning Optimization & SIEM Correlation** - Configure/tune/optimize **Tenable Nessus** scanning policies and infrastructure - Troubleshoot credentialed scan failures and close scanning coverage gaps (on-prem, cloud, VDI) - Correlate findings with **Microsoft Sentinel**, **Varonis**, and **Splunk** to validate results and suppress false positives - Improve scanning accuracy, effectiveness, and reporting - Provide dashboards/metrics for technical and executive audiences (e.g., **MTTR**, vulnerability aging, patch compliance, security exceptions) **Endpoint Security & Server Patch Management** - Configure/implement/optimize patch management using **Microsoft Endpoint Configuration Manager (MECM)**, **Ivanti**, and **Jamf** - Design patch deployment rings, maintenance windows, and automated workflows - Execute risk-based Windows and Linux patching plans - Implement endpoint/server hardening to address vulnerabilities and configuration weaknesses - Prepare/track change requests (procedures, testing, validation, rollback documentation) - Update business continuity/disaster recovery documentation related to patch management **Firewall, Network & Cloud Security Engineering** - Configure, implement, and harden enterprise firewall security policies - Remediate misconfigurations, overly permissive rules, deprecated objects, and unnecessary access via approved change control - Work within the customer’s **Check Point** environment to assess/configure/troubleshoot/validate improvements - Apply hands
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.