Cloud Vulnerability Management Engineer (Onsite Hybrid)

NTT DATA, Inc.; Atlanta, Northern (GA, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

NTT DATA Services in Atlanta seeks a Cloud Vulnerability Management Engineer to lead vulnerability lifecycle across hybrid cloud environments. You will work with Azure, AWS, Spark-based platforms, and containerized apps to identify, prioritize, and remediate security findings.

You will collaborate with cross-functional teams including DevOps, Cloud Engineering, and Cybersecurity to implement fixes and prevent repeat issues, with a focus on SIEM, patching, and secure configurations.

Qualifications

• Experience with vulnerability management lifecycle across cloud and on-prem environments.
• Familiarity with CVE/CVSS, risk-based prioritization, and remediation workflows.
• Experience integrating security tooling into CI/CD and DevSecOps pipelines.

Responsibilities

• Manage end-to-end vulnerability management lifecycle across hybrid cloud environments (Azure, AWS).
• Analyze scan results for cloud infra, OS, containers, dependencies, and data platforms.
• Prioritize remediation based on severity, exposure, and business risk.
• Collaborate with Development, Cloud Engineering, DevOps, SRE, and Cybersecurity teams on remediation plans.
• Support vulnerabilities across AWS/Azure, Linux/Windows, Kubernetes, containers, and Spark-based apps.

Skills

Vulnerability management

CI/CD integration

DevSecOps

Cloud security

Azure

AWS

Kubernetes

Docker

Linux/Windows

Spark

Tools

Azure

AWS

Kubernetes

Docker

Apache Spark

Java

Job description

Select how often (in days) to receive an alert: Create Alert

Cloud Vulnerability Management Engineer (Onsite Hybrid)

Date: Oct 1, 2026

Location: Atlanta, GA, US

Company: NTT DATA Services

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization.

We are currently seeking a Cloud Vulnerability Management Engineer (Onsite Hybrid) to join our team in Atlanta, Georgia (US-GA), United States (US).

Technology Focus: Hybrid Cloud / Azure / AWS / Apache Spark
Role Focus: Cloud Vulnerability Management / DevSecOps / Cloud Security

Job Responsibilities Include:

• Manage the end-to-end vulnerability management lifecycle for enterprise applications and infrastructure hosted across hybrid cloud, Microsoft Azure, and AWS environments.
• Analyze vulnerability scan results and identify security vulnerabilities affecting cloud infrastructure, operating systems, containers, application dependencies, open-source libraries, and cloud-hosted data platforms.
• Perform vulnerability assessment and prioritization based on CVE/CVSS severity, exploitability, application criticality, external exposure, and overall business risk.
• Work closely with Application Development, Cloud Engineering, DevOps, SRE, Infrastructure, and Cybersecurity teams to define and execute vulnerability remediation plans.
• Support identification and remediation of vulnerabilities across AWS and Azure cloud services, Linux/Windows servers, Kubernetes, containers, Docker images, Java applications, and open-source components.
• Support vulnerability management for Apache Spark-based applications and data-processing platforms, including Spark runtime versions, Java/JVM dependencies, libraries, packages, and associated cloud infrastructure.
• Work with engineering teams to troubleshoot the technical root cause of vulnerabilities and recommend appropriate remediation, including patching, dependency upgrades, configuration changes, infrastructure changes, or compensating controls.
• Validate successful remediation through rescanning, technical verification, and security evidence collection.
• Track Critical and High vulnerabilities against established remediation SLAs and proactively escalation overdue vulnerabilities, blockers, and risks.
• Identify recurring vulnerability patterns and recommend systemic solutions and preventive controls to reduce repeat findings.
• Integrate vulnerability and security scanning into CI/CD and DevSecOps pipelines, enabling earlier identification of vulnerabilities during the software development lifecycle.
• Support cloud security posture assessments and remediation of configuration weaknesses across Azure, AWS,