Vulnerability Remediation Engineer

Job responsibilities:

Role Summary: The role requires deep hands‑on RHEL experience , strong telemetry/auditing and observability skills, and EDR knowledge (CrowdStrike or similar). The candidate must have proven experience in regulated, enterprise environments with change control, patching, and lifecycle processes; be proficient in automation (Ansible; Chef knowledge desirable), Python/Bash scripting; and able to act as a subject‑matter expert for OS security, CIS hardening, and enforcement of best practices for configuration, privileges, and access management

Job Description:

• Enterprise RHEL/OS security SME: Secure configuration, package/software management, auditing, performance tuning, kernel/module handling, patching, monitoring, and lifecycle management.
• DevSecOps integration: embed security into CI/CD and infrastructure pipelines (vulnerability scanning, secrets management, etc.).
• Artifact management: integrate artifact repositories (e.g., JFrog Artifactory) into release pipelines.
• Cross‑team coordination: work with Security, Application, OS, and Infra teams to assess, classify, and prioritize security risks by impact and severity.
• Automation & tooling: develop Ansible playbooks, Python/Bash tooling, and work with CI pipelines (Jenkins); Chef knowledge desirable.
• Secure baselines & hardening: implement, maintain, and review CIS (or equivalent) OS baselines and system‑level security controls, plus patch management.
• Regulated environment experience: proven track record in large, regulated environments with formal change control, compliance evidence, and lifecycle governance.