Linux Patch & Vulnerability Engineer (On-Prem & Cloud)

State Street Corp; New York (NY); In loco; USD 110.000 - 178.000; Tempo pieno

Vantaggi offerti da questo lavoro

401K with company match

Insurance (medical, dental, vision)

Paid time off & sick leave

Employee Assistance Program

Descrizione del lavoro

State Street Corp’s Globalink Systems Engineering Linux team seeks a Linux Systems Engineer focused on patching and vulnerability management in on-premises and cloud environments. You will drive automated remediation, lifecycle management, and security hardening to keep servers patched, secure, and auditable.

Responsibilities include designing patch deployment for RHEL/CentOS/Ubuntu, analyzing vulnerability scans from Tenable/Qualys/Rapid7, and using Ansible, Puppet, or Chef to orchestrate

Competenze

• Experience administering Linux production environments.
• Hands-on with RHEL/CentOS/Ubuntu and package-management tooling.
• Experience with vulnerability platforms such as Tenable, Qualys, or Rapid7.
• Experience with automation and configuration-management tools such as Ansible, Puppet, or Chef.
• Working knowledge of security hardening, vulnerability remediation, kernel and firmware lifecycle management, and audit documentation.

Mansioni

• Design, implement, and automate patch deployment strategies for RHEL, CentOS, and Ubuntu environments.
• Analyze vulnerability scan results and execute remediation plans to close security gaps.
• Use Ansible, Puppet, or Chef to orchestrate mass updates and maintain configuration consistency at scale.
• Manage kernel upgrades, firmware updates, and driver compatibility across hardware, virtual, on-premises, and cloud platforms.
• Maintain rigorous documentation and reporting to support audit and compliance requirements (SOC 2, PCI DSS).
• Coordinate production maintenance activities where uptime and maintenance windows are critical.

Conoscenze

Linux administration

Command-line proficiency

Shell scripting

Security mindset

Infrastructure as code

Troubleshooting

Strumenti

Ansible

Puppet

Chef

Terraform

Tenable

Qualys

Rapid7

YUM/DNF/APT

Descrizione del lavoro

State Street Corp’s Globalink Systems Engineering Linux team seeks a Linux Systems Engineer focused on patching and vulnerability management in on-premises and cloud environments. You will drive automated remediation, lifecycle management, and security hardening to keep servers patched, secure, and auditable.

Responsibilities include designing patch deployment for RHEL/CentOS/Ubuntu, analyzing vulnerability scans from Tenable/Qualys/Rapid7, and using Ansible, Puppet, or Chef to orchestrate