Vulnerability Remediation Engineer

Job Title

Job Overview:

Pay Range: $45.00hr - $50.00hr

Requirement/Must Have:

• Deep hands-on RHEL experience.
• Strong telemetry, auditing, and observability skills.
• EDR knowledge (CrowdStrike or similar).
• Proven experience in regulated, enterprise environments with change control, patching, and lifecycle processes.
• Proficiency in automation using Ansible.
• Proficiency in Python and Bash scripting.
• Ability to act as a subject-matter expert for OS security, CIS hardening, and enforcement of best practices for configuration, privileges, and access management.
• Experience with secure configuration, package/software management, auditing, performance tuning, kernel/module handling, patching, monitoring, and lifecycle management.
• Experience embedding security into CI/CD and infrastructure pipelines including vulnerability scanning and secrets management.
• Experience integrating artifact repositories such as JFrog Artifactory into release pipelines.
• Experience developing Ansible playbooks and working with CI pipelines like Jenkins.
• Experience implementing, maintaining, and reviewing CIS or equivalent OS baselines and system-level security controls.
• Proven track record in large, regulated environments with formal change control, compliance evidence, and lifecycle governance.

Responsibilities:

• Serve as an Enterprise RHEL/OS security SME.
• Integrate DevSecOps by embedding security into CI/CD and infrastructure pipelines.
• Manage artifacts and integrate repositories into release pipelines.
• Coordinate across teams including Security, Application, OS, and Infrastructure to assess, classify, and prioritize security risks by impact and severity.
• Develop automation and tooling using Ansible playbooks, Python/Bash, and CI pipelines.
• Implement and maintain secure baselines and hardening standards.
• Operate within regulated environments following formal change control and lifecycle governance.

Nice to Have:

• Chef knowledge.

Skills:

• RHEL.
• Vulnerability Management.
• OS Security.
• CIS Hardening.
• Ansible.
• Python.
• Bash.
• CrowdStrike.
• EDR.
• Jenkins.
• JFrog Artifactory.
• Patch Management.
• DevSecOps.

Qualification And Education:

• Subject-matter expertise in OS security and CIS hardening.