Vulnerability Remediation Engineer

Job Title Job Overview:

Pay Range: $45.00hr - $50.00hr

Requirement/Must Have: Deep hands-on RHEL experience.

Strong telemetry, auditing, and observability skills.

EDR knowledge (CrowdStrike or similar).

Proven experience in regulated, enterprise environments with change control, patching, and lifecycle processes.

Proficiency in automation using Ansible.

Proficiency in Python and Bash scripting.

Ability to act as a subject-matter expert for OS security, CIS hardening, and enforcement of best practices for configuration, privileges, and access management.

Experience with secure configuration, package/software management, auditing, performance tuning, kernel/module handling, patching, monitoring, and lifecycle management.

Experience embedding security into CI/CD and infrastructure pipelines including vulnerability scanning and secrets management.

Experience integrating artifact repositories such as JFrog Artifactory into release pipelines.

Experience developing Ansible playbooks and working with CI pipelines like Jenkins.

Experience implementing, maintaining, and reviewing CIS or equivalent OS baselines and system-level security controls.

Proven track record in large, regulated environments with formal change control, compliance evidence, and lifecycle governance.

Responsibilities: Serve as an Enterprise RHEL/OS security SME.

Integrate DevSecOps by embedding security into CI/CD and infrastructure pipelines.

Manage artifacts and integrate repositories into release pipelines.

Coordinate across teams including Security, Application, OS, and Infrastructure to assess, classify, and prioritize security risks by impact and severity.

Develop automation and tooling using Ansible playbooks, Python/Bash, and CI pipelines.

Implement and maintain secure baselines and hardening standards.

Operate within regulated environments following formal change control and lifecycle governance.

Nice to Have: Chef knowledge.

Skills: RHEL.

Vulnerability Management.

OS Security.

CIS Hardening.

Ansible.

Python.

Bash.

CrowdStrike.

EDR.

Jenkins.

JFrog Artifactory.

Patch Management.

DevSecOps.

Qualification And Education: Subject-matter expertise in OS security and CIS hardening.