Network Vulnerability Remediation Engineer – Mid
Posted 6hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Network Vulnerability Remediation Engineer securing Leidos’ U.S. Army enterprise network. Remediating vulnerabilities, patching devices, and implementing DoD security hardening.
Responsibilities:
- Analyze and remediate security vulnerabilities affecting enterprise network devices and infrastructure
- Evaluate vulnerability findings, vendor security updates, patches, and recommended mitigation strategies
- Develop, test, and implement security patches, configuration changes, and vulnerability remediation solutions
- Execute approved network configuration changes and vendor updates through established ASI and change-management processes
- Support DoD security requirements, including STIG implementation and network hardening
- Collaborate with Information Assurance teams and the AGUN Cybersecurity Service Provider (CSSP) to address security risks and maintain compliance
- Troubleshoot network connectivity, performance, and security issues following remediation activities
- Perform network device upgrades, patching, configuration management, and lifecycle maintenance
- Develop vulnerability assessments, patch/upgrade analyses, mitigation configurations, testing results, and production release plans
- Document remediation activities, implementation results, and ticket closure evidence
- Maintain network configuration records, technical documentation, and operational procedures
- Work independently on assigned engineering tasks while collaborating with senior engineers on complex issues
Requirements:
- Active DoD Secret security clearance and U.S. citizenship
- Bachelor's degree in a related technical field with 4–8 years of relevant experience, or approximately 8–12 years of relevant experience without a degree
- DoD 8570/8140 IAT Level II certification, such as Security+
- Approved Computing Environment (CE) certification
- Hands-on experience with network device patching, firmware upgrades, configuration management, and vulnerability remediation
- Strong knowledge of enterprise networking, including LAN/WAN, BGP, TCP/UDP, IPSec, VPNs, Layer 2/Layer 3 routing, MPLS, and firewalls
- Experience with at least one network management platform: Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space
- Hands-on experience with at least two of: Cisco, Juniper, Palo Alto, Dell Networking, Remote Access VPN (RAVPN), GlobalProtect, or AppGate
- Experience implementing DoD STIGs and network security hardening
- Familiarity with SFTP, SSH, SCP, SNMP, and NTP
- Ability to troubleshoot and resolve moderately complex network issues
- Strong communication, documentation, and customer-facing skills
- Ability to work independently and collaborate with geographically dispersed technical teams
- Flexibility to work nonstandard shifts when required
- Willingness to travel up to 10%
- Preferred: experience supporting U.S. Army, DISA, or other DoD enterprise networks
- Preferred: CCNA, CCNP, or equivalent networking certification
- Preferred: experience with network modernization, migration, or infrastructure transformation
- Preferred: hands-on experience with Cisco SD-WAN
- Preferred: experience configuring or supporting Palo Alto Next-Generation Firewalls
- Preferred: familiarity with virtualized network infrastructure
- Preferred: knowledge of Git, GitLab CI/CD, Ansible, Terraform, or Puppet
- Preferred: basic Python scripting experience for network automation
- Preferred: experience supporting large, geographically dispersed enterprise networks
- Preferred: familiarity with DoD cybersecurity policies and compliance requirements
- Preferred: experience creating network diagrams, configuration records, and technical documentation
Benefits:
- Remote work arrangement
- Up to 10% travel
- Opportunity to support the U.S. Army's global operations
- Work alongside experienced network engineers and cybersecurity professionals














