Site Reliability Engineer - Vulnerability Remediation Consultant

Responsibilities

• Triage, analyze, prioritize, and remediate infrastructure and configuration vulnerabilities identified through Wiz.
• Remediate AWS account, service, IAM, networking, and cloud configuration findings while implementing cloud-native security best practices.
• Implement security hardening and remediation across Windows Server and Linux environments.
• Configure and secure VMware-hosted infrastructure and virtual machine environments.
• Implement Kubernetes security best practices across Amazon EKS, Rancher, and kOps environments.
• Harden container platforms and workloads across the cluster, node, runtime, and workload layers.
• Develop and implement Infrastructure-as-Code changes to ensure remediations are repeatable, scalable, and sustainable.
• Modify CI/CD pipelines and deployment workflows to prevent vulnerabilities and configuration issues from being reintroduced.
• Partner with application, platform, cloud, infrastructure, and security teams to coordinate remediation activities and resolve complex findings.
• Validate completed remediation activities and ensure findings are accurately resolved and reflected within Wiz.
• Create technical documentation, remediation standards, and reusable patterns for recurring infrastructure and security findings.
• Provide security engineering expertise and technical guidance to client teams throughout the engagement.

Qualifications

• Strong AWS administration and security experience, including IAM, networking, account configuration, and cloud-native security controls.
• Strong Kubernetes administration and security experience, including Amazon EKS and Rancher; experience with kOps is preferred.
• Strong knowledge of container and container-platform security.
• Hands-on Windows Server and Linux administration, configuration, troubleshooting, and operating system hardening experience.
• Experience administering and securing VMware infrastructure and virtual machine environments.
• Strong Infrastructure-as-Code experience; Terraform is preferred.
• Experience developing, maintaining, and securing CI/CD pipelines and deployment workflows.
• Strong scripting and automation skills using Python, Bash, and/or PowerShell.
• Experience supporting vulnerability management programs and remediating Critical and High security findings.
• Experience with Wiz or another CNAPP/CSPM platform is strongly preferred.
• Strong troubleshooting and root-cause analysis skills.
• Strong documentation and stakeholder communication skills.
• Able to work effectively across infrastructure, cloud, security, application, and platform engineering teams.