DevOps Engineer – Vulnerability Patching (Adobe, cURL, Jenkins, Notepad++, NumPy, Vim)

Prodapt Solutions Private Limited; Chennai; On-site; INR 600,000 - 1,000,000; Full time

Job summary

An established industry player is on the lookout for a skilled DevOps Engineer specializing in vulnerability management and patching. This role involves identifying and mitigating security vulnerabilities in a variety of tools while ensuring system stability and compliance. You'll be responsible for developing automation scripts, applying security patches, and implementing monitoring solutions to uphold security best practices. Join a dynamic team where your expertise will contribute to enhancing security measures and driving automation in patch management. If you're passionate about IT security and looking to make a significant impact, this opportunity is perfect for you.

Qualifications

• 5+ years of experience in DevOps, IT Security, or System Administration.
• Strong experience with vulnerability patching for various tools.
• Proficiency in Windows and Linux administration.

Responsibilities

• Identify and remediate security vulnerabilities across tools.
• Develop automation scripts to streamline patching processes.
• Ensure CI/CD pipeline security and compliance.

Skills

Vulnerability Management

Patch Management

PowerShell Scripting

Bash Scripting

Python Scripting

Windows Administration

Linux Administration

CI/CD Security

Incident Response

Cloud Platforms (AWS, Azure, GCP)

Education

Bachelor's Degree in Computer Science or related field

Certifications (AWS Certified DevOps Engineer, RHCE, CISSP)

Tools

Jenkins

SCCM

Intune

Nessus

Qualys

Ansible

Puppet

Chef

Adobe Products

cURL

Job description

Overview

We are seeking a DevOps Engineer with expertise in vulnerability management and patching for Adobe products, cURL, Jenkins, Notepad++, NumPy, and Vim. The ideal candidate will be responsible for identifying, assessing, and mitigating security vulnerabilities in these tools while ensuring system stability, compliance, and automation of patching processes.

Responsibilities

1. Vulnerability Management: Identify, analyze, and remediate security vulnerabilities in Adobe, cURL, Jenkins, Notepad++, NumPy, and Vim across development and production environments.
2. Patch Deployment: Apply security patches and updates efficiently to mitigate risks while ensuring minimal downtime.
3. Automation & Scripting: Develop automation scripts (PowerShell, Bash, Python, Ansible) to streamline vulnerability patching.
4. Configuration Management: Utilize SCCM, Intune, Ansible, Puppet, or Chef to enforce secure configurations and manage patch deployments.
5. CI/CD Pipeline Security: Ensure Jenkins updates and security fixes are integrated into CI/CD pipelines to prevent pipeline vulnerabilities.
6. Monitoring & Compliance: Implement monitoring solutions and security best practices to ensure compliance with CIS, NIST, ISO 27001, and PCI-DSS.
7. Incident Response: Work with security teams to investigate and remediate security incidents related to vulnerabilities in the specified software.
8. Documentation & Reporting: Maintain accurate documentation of patching activities, vulnerability reports, and risk assessments.

Requirements

1. Required Skills & Experience:
2. xx years of experience in DevOps, IT Security, or System Administration.
3. Strong experience with vulnerability patching for Adobe, cURL, Jenkins, Notepad++, NumPy, and Vim.
4. Proficiency in Windows and Linux administration, including package management tools (APT, YUM, Chocolatey, Winget).
5. Experience with patch management tools (WSUS, SCCM, Intune, or third-party patching solutions like Ivanti, Qualys, or Tenable).
6. Expertise in PowerShell, Bash, or Python scripting for automation and deployment.
7. Hands-on experience with Jenkins administration, security hardening, and plugin management.
8. Familiarity with vulnerability scanning tools (Nessus, Qualys, Tenable, Rapid7).
9. Understanding of CI/CD security best practices and open-source security risks.
10. Knowledge of cloud platforms (AWS, Azure, GCP) and infrastructure-as-code (Terraform, Ansible).
11. Collaborate closely with Dev teams and work on remediation solutions by understanding application architecture.
12. Preferred Qualifications:
13. Certifications such as AWS Certified DevOps Engineer, Microsoft Certified: Security Operations Analyst, RHCE, or CISSP.
14. Experience working in Telecom industries.
15. Prior experience with endpoint security and system hardening.