Linux Patch & Vulnerability Engineer | Automated Remediation

State Street; New York (NY); On-site; USD 110,000 - 178,000; Full time

Job summary

State Street in New York is seeking a Linux Systems Engineer focused on patching and vulnerability management. You will lead security hardening and lifecycle management across on-premises and cloud Linux environments to keep servers patched, secure, and compliant.

The role supports SOC 2 and PCI DSS, with night/weekend on-call requirements and production maintenance windows. You will work with Tenable, Qualys, Rapid7, and automation tools to drive scalable remediation.

Qualifications

• Professional experience administering Linux production environments.
• Experience with RHEL, CentOS or Ubuntu and package-management tooling.
• Experience with vulnerability platforms such as Tenable, Qualys, or Rapid7.
• Experience with automation and configuration-management tools such as Ansible, Puppet, or Chef.
• Knowledge of security hardening, vulnerability remediation, kernel and firmware lifecycle management, and audit documentation.

Responsibilities

• Design, implement, and automate patch deployment strategies for RHEL, CentOS, and Ubuntu environments.
• Analyze vulnerability scan results and execute remediation plans to close security gaps.
• Use Ansible, Puppet, or Chef to orchestrate mass updates and maintain configuration consistency at scale.
• Manage kernel upgrades, firmware updates, and driver compatibility across hardware, virtual, on-premises, and cloud platforms.
• Maintain documentation and reporting to support audit and compliance requirements (SOC 2, PCI DSS).
• Coordinate production maintenance activities where uptime and maintenance windows are critical.

Skills

Linux administration

Shell scripting

Security mindset

Infrastructure as code

Troubleshooting

Education

Linux production environments experience

RHEL/CentOS/Ubuntu expertise

Tools

Tenable

Qualys

Rapid7

Ansible

Puppet

Chef

Terraform

YUM/DNF/APT

Job description

State Street in New York is seeking a Linux Systems Engineer focused on patching and vulnerability management. You will lead security hardening and lifecycle management across on-premises and cloud Linux environments to keep servers patched, secure, and compliant.

The role supports SOC 2 and PCI DSS, with night/weekend on-call requirements and production maintenance windows. You will work with Tenable, Qualys, Rapid7, and automation tools to drive scalable remediation.