Security Engineer

Security / Vulnerability Engineer

Job Summary

We are looking for a Security / Vulnerability Engineer with strong experience in application and infrastructure security. The ideal candidate will be responsible for analyzing security findings, coordinating vulnerability remediation, implementing technical changes, and managing server and OS patching activities.

Key Responsibilities

• Analyze and assess security findings and vulnerabilities across applications and infrastructure.
• Work as an Application/Systems Engineer with a strong security focus, troubleshooting and resolving security-related issues.
• Implement security and infrastructure changes based on the scope, complexity, and business requirements.
• Coordinate, test, and validate server and operating system patches to ensure secure and stable environments.
• Collaborate with application owners, infrastructure teams, and third-party vendors to identify and remediate vulnerabilities.
• Track remediation activities and ensure vulnerabilities are addressed within required timelines.
• Support security hardening, configuration changes, and other initiatives designed to improve the organization's security posture.
• Participate in testing and validation of remediation changes before and after implementation.

Required Skills

• Experience in Vulnerability Management and Vulnerability Remediation.
• Strong understanding of Application Security and Infrastructure Security.
• Hands-on experience with Windows and/or Linux servers.
• Experience with OS and server patching.
• Strong troubleshooting and systems/application engineering skills.
• Familiarity with vulnerability assessment tools such as Tenable, Nessus, Qualys, Rapid7, or similar platforms.
• Experience working with application owners, infrastructure teams, and external vendors.
• Strong communication, coordination, and problem-solving skills.

Preferred Qualifications

• Experience with security hardening and configuration management.
• Knowledge of CVE/CVSS, vulnerability assessment, and remediation processes.
• Experience with change management and enterprise IT environments.
• Relevant certifications such as Security+, CySA+, CISSP, or similar are a plus.

Ideal Candidate

The ideal candidate is a hands-on security professional who can analyze vulnerabilities, understand their technical impact, implement remediation, and coordinate with multiple technical teams and vendors to ensure security findings are resolved effectively.