Network Vulnerability Remediation Engineer - Mid

Leidos

1d•$73,450 - $132,775•Remote

About The Position

Leidos is hiring a Mid-Level Network Vulnerability Remediation Engineer to support the Army Global Unified Network (AGUN) program. This remote role focuses on identifying, analyzing, and remediating security vulnerabilities across enterprise network devices and infrastructure. The engineer will work with network engineers, cybersecurity teams, and mission partners to implement patches, configuration updates, and risk mitigations while preserving mission-critical operations. The position requires an active DoD Secret clearance and U.S. citizenship, and may involve travel up to 10%.

Requirements

Active DoD Secret security clearance and U.S. citizenship.
Bachelor's degree in a related technical field with 4–8 years of relevant experience, or approximately 8–12 years of relevant experience without a degree.
DoD 8570/8140 IAT Level II certification, such as Security+, and an approved Computing Environment (CE) certification.
Hands-on experience with network device patching, firmware upgrades, configuration management, and vulnerability remediation.
Strong knowledge of enterprise networking, including LAN/WAN, BGP, TCP/UDP, IPSec, VPNs, Layer 2/Layer 3 routing, MPLS, and firewalls.
Experience with at least one network management platform, such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.
Hands-on experience with at least two of the following: Cisco, Juniper, Palo Alto, Dell Networking, Remote Access VPN (RAVPN), GlobalProtect, or AppGate.
Experience implementing DoD STIGs and network security hardening.
Familiarity with SFTP, SSH, SCP, SNMP, and NTP.
Ability to troubleshoot and resolve moderately complex network issues.
Strong communication, documentation, and customer-facing skills.
Ability to work independently and collaborate with geographically dispersed technical teams.
Flexibility to work nonstandard shifts when required.
Willingness to travel up to 10%.

Nice To Haves

Experience supporting U.S. Army, DISA, or other DoD enterprise networks.
CCNA, CCNP, or equivalent networking certification.
Experience with network modernization, migration, or infrastructure transformation.
Hands-on experience with Cisco SD-WAN.
Experience configuring or supporting Palo Alto Next-Generation Firewalls (NGFW).
Familiarity with virtualized network infrastructure.
Knowledge of Git, GitLab CI/CD, Ansible, Terraform, or Puppet.
Basic Python scripting experience for network automation.
Experience supporting large, geographically dispersed enterprise networks.
Familiarity with DoD cybersecurity policies and compliance requirements.
Experience creating network diagrams, configuration records, and technical documentation.

Responsibilities

Analyze and remediate security vulnerabilities affecting enterprise network devices and infrastructure.
Evaluate vulnerability findings, vendor security updates, patches, and recommended mitigation strategies.
Develop, test, and implement security patches, configuration changes, and vulnerability remediation solutions.
Execute approved network configuration changes and vendor updates through established ASI and change-management processes.
Support DoD security requirements, including STIG implementation and network hardening.
Collaborate with Information Assurance teams and the AGUN Cybersecurity Service Provider (CSSP) to address security risks and maintain compliance.
Troubleshoot network connectivity, performance, and security issues following remediation activities.
Perform network device upgrades, patching, configuration management, and lifecycle maintenance.
Develop vulnerability assessments, patch and upgrade analyses, mitigation configurations, testing results, and production release plans.
Document remediation activities, implementation results, and ticket closure evidence.
Maintain network configuration records, technical documentation, and operational procedures.
Work independently on assigned engineering tasks while collaborating with senior engineers on complex issues.