Vulnerability Engineer

• Responsible for identifying, analyzing, prioritizing, and remediating security vulnerabilities across Windows and Linux server environments
• Supports the organization’s security posture by ensuring timely identification, analysis, and remediation of vulnerabilities across middleware platforms
• Collaborates with the ITVM team to review weekly/biweekly scan reports, validate findings, and translate them into actionable remediation tasks
• Prepares detailed remediation plans including impact assessments, risk evaluations, timelines, and required resource coordination
• Executes configuration level hardening and applies vendor fix packs on middleware technologies such as JBoss, Tomcat, IBM IHS, and WebSphere
• Ensures all remediation activities follow structured change management processes, maintaining system stability and preventing service disruptions
• Coordinates with cross functional teams including application, infrastructure, and security teams to ensure smooth implementation and validation
• Maintains comprehensive documentation for all remediation activities, configurations, approvals, and compliance requirements
• Monitors and prioritizes high severity vulnerabilities to meet organizational security SLAs and regulatory expectations
• Manages and maintains clear communication across Email DLs, Teams channels and ITSM platforms (ServiceNow) to streamline collaboration and track vulnerability closure
• Utilizes vendor support IDs to download patches, engage vendor support, and resolve complex middleware remediation issues
• Contributes to continuous improvement of vulnerability management processes through analysis, feedback, and proactive security hardening

• Familiarity with Vulnerability scanning platforms and a good understanding of network fundamentals, firewalls, authentication, and encryption
• Understanding of CVEs, CVSS scoring, zero day vulnerabilities, and threat exposure
• Strong hands-on experience with Windows Server and Linux Server administrations

Experience with scripting (PowerShell, Bash, Python optional)