Note: The job is a remote job and is open to candidates in USA. NLB Services is seeking an experienced Senior Vulnerability Management / Cloud Security Engineer to manage enterprise vulnerability identification, prioritization, remediation, and validation across hybrid-cloud environments. The role partners with engineering and cybersecurity teams, integrates security scanning into CI/CD and DevSecOps pipelines, supports AWS and Azure security posture assessments, and develops automation, dashboards, and risk reports.
Responsibilities
- Manage the end-to-end vulnerability management lifecycle across enterprise applications, infrastructure, AWS, Azure, and hybrid-cloud environments
- Analyze and prioritize vulnerabilities using CVE/CVSS, exploitability, business criticality, and external exposure
- Partner with Application Development, Cloud Engineering, DevOps/SRE, Infrastructure, and Cybersecurity teams on remediation
- Identify and remediate vulnerabilities across Linux/Windows, Kubernetes, Docker, Java/JVM, open-source libraries, and cloud services
- Support vulnerability management for Apache Spark, Databricks/EMR, Hadoop, and large-scale data-processing platforms
- Troubleshoot root causes and recommend remediation through patching, dependency upgrades, configuration changes, infrastructure changes, or compensating controls
- Validate remediation through rescanning, technical verification, and security evidence
- Track Critical/High vulnerabilities against SLAs and escalate overdue risks and blockers
- Integrate security scanning into CI/CD and DevSecOps pipelines
- Support cloud security posture assessments across AWS and Azure
- Develop Python, Bash, or PowerShell automation for vulnerability management, reporting, and compliance evidence
- Create dashboards and reports covering vulnerability aging, SLA compliance, risk acceptance, remediation trends, and vulnerability reduction
- Communicate technical risks and remediation status to engineering and management stakeholders
Skills
- 7+ years of experience in IT Engineering, Cloud Engineering, DevOps/SRE, Cybersecurity, Application Security, or Vulnerability Management
- 4+ years of hands-on Vulnerability Management, Application Security, or Cloud Security experience
- 4+ years working with AWS and/or Microsoft Azure
- 2+ years supporting hybrid-cloud/multi-cloud environments
- 3+ years with vulnerability/security platforms such as Qualys, Tenable, Rapid7, Wiz, Prisma Cloud, Microsoft Defender for Cloud, AWS Inspector, or equivalent
- Strong experience with CVE/CVSS-based vulnerability analysis and remediation
- 2+ years supporting security/vulnerability management for Apache Spark, Databricks, EMR, Hadoop, or similar platforms
- 2+ years working with Java/JVM applications and open-source dependency remediation
- 2+ years of experience with Docker and Kubernetes/container vulnerability management
- 2+ years working with CI/CD and DevSecOps tools such as GitLab CI, GitHub Actions, Jenkins, or Azure DevOps
- Experience with SAST, DAST, SCA, container scanning, secrets scanning, and IaC security
- Strong scripting/automation skills using Python, Bash, PowerShell, or equivalent
- Strong understanding of AWS/Azure IAM, network security, logging/monitoring, and cloud security posture management
- Strong knowledge of vulnerability SLAs, patch management, remediation validation, security exceptions, and risk acceptance
- Excellent troubleshooting, analytical, and stakeholder communication skills
Company Overview
Company H1B Sponsorship