Description

You will manage the end-to-end vulnerability management program across hybrid infrastructure, including servers, workstations, and cloud environments.

This role is on-site.

Responsibilities

• Execute regular vulnerability scans and deep analysis using Qualys and Burp Suite across GCP, AWS, and Azure.
• Integrate security testing into CI/CD pipelines using Jenkins, GitLab CI, Azure DevOps, SonarQube, Snyk, and ZAP.
• Develop Ansible playbooks and scripts to automate patching, configuration hardening, and compliance checks.
• Validate scan results manually to reduce false positives and prioritize remediation based on risk.
• Collaborate with development and operations teams to embed secure coding principles and automate security workflows.

Required Skills

• 3+ years of experience in vulnerability management or DevSecOps.
• Proficiency with cloud platforms: AWS, Azure, and GCP.
• Experience managing CI/CD pipelines with Jenkins, GitLab CI, or Azure DevOps.
• Hands-on experience with Python, Bash, and Terraform.
• Ability to automate tasks using Ansible.
• Working knowledge of Windows and Linux operating systems.
• Familiarity with JFrog, SonarQube, Snyk, and ZAP.
• Understanding of OWASP Top 10 and NIST methodologies.
• Competency in reporting findings using Excel and Power BI.

Preferred Skills

• Experience with automated security testing workflows and shifting security left in the development lifecycle.

Key Skills

Education

Bachelor's degree