Vulnerability Remediation Engineer

About the role

The Vulnerability Remediation Engineer role requires deep hands‑on RHEL experience, strong telemetry/auditing and observability skills, and EDR knowledge (CrowdStrike or similar). The candidate must have proven experience in regulated, enterprise environments with change control, patching, and lifecycle processes; be proficient in automation (Ansible; Chef knowledge desirable), Python/Bash scripting; and act as a subject‑matter expert for OS security, CIS hardening, and enforcement of best practices for configuration, privileges, and access management.

Responsibilities

• Enterprise RHEL/OS security SME: secure configuration, package/software management, auditing, performance tuning, kernel/module handling, patching, monitoring, and lifecycle management.
• DevSecOps integration: embed security into CI/CD and infrastructure pipelines (vulnerability scanning, secrets management, etc.).
• Artifact management: integrate artifact repositories (e.g., JFrog Artifactory) into release pipelines.
• Cross‑team coordination: work with Security, Application, OS, and Infra teams to assess, classify, and prioritize security risks by impact and severity.
• Automation & tooling: develop Ansible playbooks, Python/Bash tooling, and work with CI pipelines (Jenkins); Chef knowledge desirable.
• Secure baselines & hardening: implement, maintain, and review CIS (or equivalent) OS baselines and system‑level security controls, plus patch management.
• Regulated environment experience: proven track record in large, regulated environments with formal change control, compliance evidence, and lifecycle governance.

Requirements

• Deep hands‑on experience with Red Hat Enterprise Linux (RHEL).
• Strong telemetry, auditing, and observability skills.
• EDR knowledge (CrowdStrike or similar).
• Proven experience in regulated, enterprise environments with formal change control, patching, and lifecycle processes.
• Proficiency in automation tools (Ansible; Chef knowledge desirable) and scripting (Python/Bash).
• Subject‑matter expertise in OS security, CIS hardening, and best‑practice configuration, privilege, and access management.
• Note: approximately 70 % of the team core Linux expertise and 30 % vulnerability knowledge.

Skills

• RHEL administration and hardening.
• Telemetry, auditing, observability tooling.
• EDR platforms (CrowdStrike).
• Automation: Ansible (primary), Chef (desirable).
• Scripting: Python, Bash.
• CI/CD pipelines (Jenkins) and DevSecOps integration.
• Artifact repository management (JFrog Artifactory).
• CIS benchmark implementation and maintenance.
• Change control and compliance in regulated environments.

Benefits

• Competitive pay.
• Option to elect healthcare insurance (Dental, Medical, Vision).
• Major holidays and paid sick leave as per state law.

Pay

Maximum rate: $40/hr on W2. The actual rate/salary range depends on qualifications, experience, and location.