Vulnerability Remediation Engineer

Job Overview:

Requirement/Must Have:

• 10+ years of experience.
• Deep hands-on RHEL experience.
• Strong telemetry, auditing, and observability skills.
• EDR knowledge (CrowdStrike or similar).
• Proven experience in regulated, enterprise environments with change control, patching, and lifecycle processes.
• Proficiency in automation using Ansible.
• Desirable knowledge of Chef.
• Proficiency in Python and Bash scripting.
• Expertise in OS security, CIS hardening, and enforcement of best practices for configuration, privileges, and access management.
• Experience with artifact management and integrating repositories such as JFrog Artifactory into release pipelines.
• Experience with CI pipelines such as Jenkins.
• Strong verbal and written communication skills.

Responsibilities:

• Serve as an Enterprise RHEL/OS security SME focusing on secure configuration, package/software management, auditing, performance tuning, kernel/module handling, patching, monitoring, and lifecycle management.
• Integrate DevSecOps by embedding security into CI/CD and infrastructure pipelines including vulnerability scanning and secrets management.
• Coordinate across teams including Security, Application, OS, and Infrastructure to assess, classify, and prioritize security risks by impact and severity.
• Develop automation and tooling using Ansible playbooks and Python/Bash.
• Implement, maintain, and review CIS or equivalent OS baselines and system-level security controls.
• Manage patch management and secure baselines within a regulated environment following formal change control and compliance evidence protocols.

Nice to Have:

• Chef knowledge.

Skills:

• RHEL.
• OS Security.
• Telemetry.
• Auditing.
• Observability.
• EDR.
• CrowdStrike.
• Ansible.
• Chef.
• Python.
• Bash.
• CIS Hardening.
• Patch Management.
• DevSecOps.
• CI/CD.
• JFrog Artifactory.
• Jenkins.