Cloud Vulnerability Engineer - Hybrid Azure/AWS, DevSecOps

NTT DATA North America; Atlanta (GA); On-site; USD 90,000 - 98,000; Full time

Job summary

NTT DATA North America is seeking a Cloud Vulnerability Management Engineer to lead end-to-end vulnerability management across hybrid cloud and cloud-native environments (Azure/AWS). You will collaborate with DevSecOps, Cloud Engineering, and Security teams to implement remediation and verification processes.

The role emphasizes automation, CI/CD integration, and risk-based prioritization, with a focus on container security, JVM dependencies, and open-source components across Spark-based

Qualifications

• 7+ years in IT/security engineering, vulnerability management, or cloud security in enterprise settings.
• 4+ years hands-on vulnerability management with cloud platforms (AWS/Azure).
• 3+ years with securing cloud-native components, containers, and CI/CD pipelines.
• Experience with common VM/container security tools (Qualys/Tenable/Rapid7).
• Strong understanding of CVE/CVSS, risk-based prioritization, and remediation validation.

Responsibilities

• Lead end-to-end vulnerability management across hybrid cloud environments (Azure/AWS).
• Analyze scan results and prioritize remediation by risk, criticality, and exposure.
• Work with DevSecOps, Cloud Engineering, and Cybersecurity to implement remediation plans.
• Automate vulnerability identification, remediation tracking, and evidence collection.
• Develop dashboards and reports on open findings, aging, and SLA compliance.
• Integrate vulnerability management into CI/CD pipelines and cloud security posture reviews.

Skills

Cloud security

Vulnerability management

DevSecOps

AWS

Azure

Kubernetes

CI/CD

Python

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent

Tools

Qualys

Tenable

Rapid7

Wiz

Prisma Cloud

Microsoft Defender for Cloud

AWS Inspector

Docker/Kubernetes security tooling

Job description

NTT DATA North America is seeking a Cloud Vulnerability Management Engineer to lead end-to-end vulnerability management across hybrid cloud and cloud-native environments (Azure/AWS). You will collaborate with DevSecOps, Cloud Engineering, and Security teams to implement remediation and verification processes.

The role emphasizes automation, CI/CD integration, and risk-based prioritization, with a focus on container security, JVM dependencies, and open-source components across Spark-based