Job Description

Required Qualifications

6–10 years of strong hands-on experience with Windows Server 2016/2019/2022 in enterprise environments.
Proven experience driving vulnerability remediation and patch management for Windows servers.
Expertise with Qualys (or equivalent vulnerability scanners) including interpreting findings, false-positive validation, and closure verification.
Automation experience with Chef and/or Ansible in production Windows server environments.
Strong scripting skills (PowerShell; plus ability to use/maintain shell scripting where applicable in the environment).
Working proficiency in Ruby (or ability to maintain/extend existing Ruby codebases used for Chef remediation).
Strong understanding of Windows security fundamentals (patching, services, permissions, registry, authentication, TLS/cipher considerations as applicable).
Experience working with change management, incident/problem management, and coordinating across multiple support teams.

Preferred Qualifications

Familiarity with compliance/security frameworks and server hardening concepts (e.g., Microsoft Security Baselines, CIS benchmarks, STIG concepts) as applied to Windows Server.
Experience with CI/CD or automated testing for infrastructure code (linting, unit/integration testing where applicable).
Experience operating in large-scale environments (hundreds/thousands of servers) with tiered production controls.

Windows Vulnerability Remediation Engineer - Remote

Quick Overview