Vulnerability & Remediation Engineer (Linux)

Title - AI-Enabled Vulnerability & Remediation Engineer

Location : New York City, NY - 5 days onsite

Vulnerability & Remediation Engineer (Linux)

Job Summary

Experienced AI-Enabled Vulnerability & Remediation Engineer with strong Linux administration and vulnerability management expertise. The ideal candidate will be responsible for identifying, prioritizing, and remediating security vulnerabilities across enterprise Linux environments while leveraging AI tools and agentic workflows to automate vulnerability analysis, reporting, and remediation processes.

Key Responsibilities

• Administer and support RHEL 7/8/9 production environments.
• Perform vulnerability assessment and remediation using Qualys, Tenable, or Nessus.
• Analyze CVE/CVSS findings and coordinate remediation activities.
• Develop automation using Python, Bash, Ansible, Jenkins, and GitHub.
• Build AI-powered workflows for vulnerability data collection, correlation, reporting, and remediation recommendations.
• Design and implement AI prompt-based agents and Agentic AI workflows to automate security operations.
• Work closely with Infrastructure, Security, and Application teams to drive remediation to closure.

Required Skills

• Linux Administration (RHEL 7/8/9)
• Vulnerability Management (Qualys, Nessus, Tenable)
• CVE/CVSS analysis and remediation
• Python and Bash scripting
• Jenkins, GitHub, Ansible
• AI Prompt Engineering
• AI Agent development (LangChain, LangGraph, CrewAI, Copilot Studio, AutoGen, or similar)
• Data correlation, analysis, and AI-driven reporting
• Strong troubleshooting and production support experience

Preferred Skills

• Docker, Kubernetes, OpenShift
• AWS, Azure, or Google Cloud Platform
• ServiceNow, Jira
• Red Hat certifications (RHCSA/RHCE)
• Experience with OpenAI, Azure OpenAI, Amazon Bedrock, or similar LLM platforms

Nice to Have

• Experience building AI solutions for Security Operations (SecOps), Vulnerability Management, or AIOps.
• Knowledge of Infrastructure-as-Code (Terraform) and DevSecOps practices.