Own and drive remediation of security vulnerability tickets across commercial and regulated environments
Coordinate closely with vulnerability management and site reliability engineering teams to ensure timely remediation within SLA
Analyze vulnerability trends to identify process gaps and recommend improvements to triage and remediation workflows
Track remediation progress and provide weekly status updates to management, including risk identification and mitigation plans
Collect and maintain remediation evidence to support compliance audits and regulatory requirements (e.g., PCI, SOC 2, C5)
Support secure operations across cloud and Linux-based infrastructure environments

5+ years of experience working with Linux-based infrastructure
5+ years of experience developing with object-oriented programming languages (e.g., Python, Ruby)
Hands-on experience with cloud environments (AWS and Google Cloud)
Experience supporting vulnerability remediation and vulnerability management programs
Experience with compliance programs and security frameworks (e.g., PCI-DSS, SOC 1/2, FedRAMP, NIST SP 800, CSF)
Ability to manage multiple remediation efforts in parallel while meeting SLA requirements
Strong analytical, problem-solving, and written/verbal communication skills
U.S. Person status required due to regulatory and government requirements

Security Engineer

Key skills