Vulnerability Engineer

Location

: Louisville, KY

Experience

: 8 - 10 Years

Apply By

: 2nd January 2027

Job Description

The Vulnerability Remediation Engineer will be responsible for driving end-to-end remediation

activities for vulnerabilities identified through Qualys scans, Penetration Testing (PT), Vulnerability

Assessments (VA), Cloud Security Assessments, and Application Security Reviews across Platform,

Cloud, and Go-based application environments.

This is a techno-functional role requiring strong technical expertise in vulnerability remediation and

security best practices, combined with the ability to coordinate cross-functional teams, manage

stakeholder communications, drive remediation governance, and provide executive-level reporting.

The role will act as the central point of coordination between Information Security, Platform

Engineering, Cloud Operations, Application Development, Infrastructure Support, and Business

Stakeholders to ensure timely remediation of security findings within established SLAs.

Key Responsibilities

Vulnerability Management & Governance

• Enterprise vulnerability remediation efforts across Platform, Cloud, and Application environments.
  
• Analyze and prioritize vulnerabilities identified through Qualys, Penetration Testing, and Security
  Assessments.
  
• Establish remediation plans and drive closure of Critical, High, and Medium severity vulnerabilities.
  
• Ensure adherence to vulnerability remediation SLAs and governance standards.
  
• Conduct weekly remediation review meetings with technical and business stakeholders.
  
• Maintain remediation trackers, risk registers, dashboards, and executive reports.
  
• Drive accountability and ownership of remediation activities across multiple teams.
  
• Coordinate vulnerability exception and risk acceptance processes when remediation is not feasible.
  Platform Security Remediation
  
• Lead remediation activities across:
  
• Windows Server Platforms
  
• Linux Platforms (RHEL, CentOS, Ubuntu)
  
• VMware and Virtualized Environments
  
• Middleware Platforms (IIS, Apache, Tomcat, WebLogic)
  
• Active Directory and Identity Services
  
• Coordinate patch deployment, operating system upgrades, and security hardening activities.
  
• Validate remediation effectiveness through rescans and verification testing.
  
• Ensure compliance with CIS Benchmarks and enterprise hardening standards.
  Cloud Security Remediation
  
• Drive remediation of security findings across cloud infrastructure.
  
• Partner with cloud engineering teams to address vulnerabilities in:
  
• Microsoft Azure
  
• Amazon Web Services (AWS)
  
• Kubernetes Platforms
  
• Containerized Environments
  
• Review cloud security posture recommendations and track remediation activities.
  
• Coordinate implementation of cloud security best practices and configuration hardening.
  Page 1
  Vulnerability Remediation Engineer
  
• Support cloud compliance initiatives and security posture improvement programs.
  Application Security Remediation
  
• Lead remediation efforts for vulnerabilities identified in Go (Golang) applications and services.
  
• Work with Development, DevOps, and Application Owners to remediate:
  
• Vulnerable libraries and dependencies
  
• Security misconfigurations
  
• Authentication and authorization vulner abilities
  
• API Security findings
  
• Container security vulnerabilities
  
• OWASP Top 10 findings
  
• Coordinate code fixes, dependency upgrades, and secure configuration updates.
  
• Validate remediation through retesting and security reviews.
  
• Promote Secure SDLC and DevSecOps adoption across application teams.
  Qualys VMDR Management
  
• Serve as the primary coordinator for remediation activities driven by Qualys VMDR findings.
  
• Review and analyze vulnerability data from Qualys scans.
  
• Prioritize findings based on:
  
• CVSS Scores
  
• Qualys Severity Ratings
  
• Asset Criticality
  
• Exploit Availability
  
• Business Impact
  
• Coordinate remediation efforts and monitor progress to closure.
  
• Manage validation scans and closure verification activities.
  
• Generate operational and executive reporting from Qualys dashboards and data.
  
• Track vulnerability trends and remediation performance metrics.
  Required Technical Skills
  Vulnerability Management
  
• Strong hands-on experience with Qualys VMDR.
  
• Vulnerability Assessment and Remediation Management.
  
• CVE and CVSS Risk Analysis.
  
• Vulnerability Prioritization and Risk-Based Remediation.
  
• Security Hardening and Compliance Programs.
  Platform Technologies
  
• Windows Server Administration.
  
• Linux Administration (RHEL, CentOS, Ubuntu).
  
• VMware / Virtualization Platforms.
  
• Active Directory.
  
• IIS, Apache, Tomcat, and Middleware Platforms.
  Cloud Technologies
  
• Microsoft Azure.
  
• Amazon AWS.
  
• Microsoft Defender for Cloud.
  
• Cloud Security Controls and Governance.
  Page 2
  Vulnerability Remediation Engineer
  
• Kubernetes.
  
• Docker Containers.
  Application Technologies
  
• Go (Golang) Application Ecosystems.
  
• API Security.
  
• Microservices Architecture.
  
• CI/CD Pipelines.
  
• GitHub, GitLab, Azure DevOps.
  Security Frameworks & Standards
  
• OWASP Top 10.
  
• CIS Benchmarks.
  
• NIST Cybersecurity Framework.
  
• Secure SDLC.
  
• DevSecOps Practices.
  
• Security Configuration Management.
  Functional Skills
  
• Stakeholder Management.
  
• Program and Project Coordination.
  
• Executive Reporting and Communication.
  
• Risk Management.
  
• Vendor Coordination.
  
• Security Governance.
  
• Audit and Compliance Support.
  
• Strong Presentation and Influencing Skills.
  Preferred Certifications
  
• CISSP
  
• CISM
  
• CEH
  
• Microsoft Azure Security Engineer Associate
  
• AWS Security Specialty
  
• Security+
  
• ITIL Foundation
  
• PMP or Agile Certifications
  Key Deliverables
  
• Vulnerability Remediation Roadmap.
  
• Weekly Remediation Status Reports.
  
• Executive Security Dashboards.
  
• Qualys VMDR Metrics and Reporting.
  
• Risk Acceptance and Exception Documentation.
  
• Vulnerability Closure Validation Reports.
  
• Penetration Test Remediation Tracking.
  
• A udit and Compliance Evidence Repository.
  Page 3
  Vulnerability Remediation Engineer
  Success Metrics
  
• Closure of Critical Vulnerabilities within defined SLA.
  
• Reduction in High-Risk Vulnerabilities across Platform, Cloud, and Application environments.
  
• Timely remediation of

CVIT/VITS

Penetration Test findings.

• Improvement in Qualys Vulnerability Scores and Compliance Metrics.
  
• Reduction in repeat security findings.
  
• Successful audit and compliance outcomes.
  
• Effective stakeholder engagement and governance reporting.

Ideal Candidate Profile

A Techno-Functional Security Leader with strong experience in Qualys VMDR-based vulnerability

management, Windows/Linux Platforms, Azure/AWS Cloud environments, and Go-based application

security remediation. The candidate should be capable of translating security findings into

actionable remediation plans while effectively coordinating Infrastructure, Cloud, Development, and

Security teams to drive timely vulnerability closure and reduce organizational risk

Salary Range:

$100,000- $120,000 a year

TCS Employee Benefits Summary:

Discretionary Annual Incentive.

Comprehensive Medical Coverage:

Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.

Family Support:

Maternal & Parental Leaves.

Insurance Options:

Auto & Home Insurance, Identity Theft Protection.

Convenience & Professional Growth:

Commuter Benefits & Certification & amp; Training Reimbursement.

Time Off:

Vacation, Time Off, Sick Leave & Holidays.

Legal & Financial Assistance:

Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

#LI-SP1

Location

Louisville, KY

Function

TECHNOLOGY

Role

Engineer

ID

438373

Skills

VMWare | Vulnerability assessment

Salary Range

$100,000 - $120,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER

SCIENCE