Senior Vulnerability Management / Cloud Security Engineer

NLB Services is seeking an experienced Senior Vulnerability Management / Cloud Security Engineer to manage enterprise vulnerability identification, prioritization, remediation, and validation across hybrid-cloud environments. The role partners with engineering and cybersecurity teams, integrates security scanning into CI/CD and DevSecOps pipelines, supports AWS and Azure security posture assessments, and develops automation, dashboards, and risk reports.

Responsibilities:

• Manage the end-to-end vulnerability management lifecycle across enterprise applications, infrastructure, AWS, Azure, and hybrid-cloud environments
• Analyze and prioritize vulnerabilities using CVE/CVSS, exploitability, business criticality, and external exposure
• Partner with Application Development, Cloud Engineering, DevOps/SRE, Infrastructure, and Cybersecurity teams on remediation
• Identify and remediate vulnerabilities across Linux/Windows, Kubernetes, Docker, Java/JVM, open-source libraries, and cloud services
• Support vulnerability management for Apache Spark, Databricks/EMR, Hadoop, and large-scale data-processing platforms
• Troubleshoot root causes and recommend remediation through patching, dependency upgrades, configuration changes, infrastructure changes, or compensating controls
• Validate remediation through rescanning, technical verification, and security evidence
• Track Critical/High vulnerabilities against SLAs and escalate overdue risks and blockers
• Integrate security scanning into CI/CD and DevSecOps pipelines
• Support cloud security posture assessments across AWS and Azure
• Develop Python, Bash, or PowerShell automation for vulnerability management, reporting, and compliance evidence
• Create dashboards and reports covering vulnerability aging, SLA compliance, risk acceptance, remediation trends, and vulnerability reduction
• Communicate technical risks and remediation status to engineering and management stakeholders

Requirements:

• 7+ years of experience in IT Engineering, Cloud Engineering, DevOps/SRE, Cybersecurity, Application Security, or Vulnerability Management
• 4+ years of hands-on Vulnerability Management, Application Security, or Cloud Security experience
• 4+ years working with AWS and/or Microsoft Azure
• 2+ years supporting hybrid-cloud/multi-cloud environments
• 3+ years with vulnerability/security platforms such as Qualys, Tenable, Rapid7, Wiz, Prisma Cloud, Microsoft Defender for Cloud, AWS Inspector, or equivalent
• Strong experience with CVE/CVSS-based vulnerability analysis and remediation
• 2+ years supporting security/vulnerability management for Apache Spark, Databricks, EMR, Hadoop, or similar platforms
• 2+ years working with Java/JVM applications and open-source dependency remediation
• 2+ years of experience with Docker and Kubernetes/container vulnerability management
• 2+ years working with CI/CD and DevSecOps tools such as GitLab CI, GitHub Actions, Jenkins, or Azure DevOps
• Experience with SAST, DAST, SCA, container scanning, secrets scanning, and IaC security
• Strong scripting/automation skills using Python, Bash, PowerShell, or equivalent
• Strong understanding of AWS/Azure IAM, network security, logging/monitoring, and cloud security posture management
• Strong knowledge of vulnerability SLAs, patch management, remediation validation, security exceptions, and risk acceptance
• Excellent troubleshooting, analytical, and stakeholder communication skills