Remote Windows Server Vulnerability Remediation Engineer

CBTS; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

CBTS seeks a Windows Wintel Vulnerability Remediation Engineer responsible for accelerating remediation across Microsoft Server 2016/2019/2022. The role utilizes Qualys, Chef, SCCM/WSUS, and PowerShell to identify, prioritize, implement, and verify fixes in alignment with compliance requirements.

Strong collaboration with Operations and engineering teams is essential. Remote, direct-hire position offering market pay.

Qualifications

• Must have 6–10 years of strong hands-on experience with Windows Server 2016/2019/2022 in enterprise environments (Wintel).
• Must have experience building/configuring, administrating, virtualization (VMware) and migrating to Cloud Platforms (AWS & Azure) with Microsoft Servers (2016/2019/2022).
• Must have experience working with Microsoft OS patching and platform hardening tools such as SCCM, WSUS or configuration management tools such as Ansible or Chef.
• Must have 5+ years of Vulnerability and Remediation experience using either Qualys (Preferred) or Tenable software.
• Must have Expertise with Qualys including interpreting findings, false-positive validation, and closure verification.
• Must have experience with Terraform for spinning up cloud resources.
• Must have automation experience with Chef in production on Windows server environments, including Cookbooks/Recipes.
• Must have strong scripting skills (PowerShell); plus shell scripting in the environment.
• Working proficiency in Ruby (or ability to maintain/extend existing Ruby codebases used for Chef remediation).
• Must have strong understanding of Windows security fundamentals (patching, services).

Responsibilities

• Coordinate remediation activities for Microsoft security updates (monthly/Out-of-Band as needed) and required reboots where applicable.
• Configuration hardening aligned to organizational standards and security baselines (as applicable in the environment).
• Mitigations/compensating controls when immediate patching is not feasible (documented and approved per process).
• Develop, enhance, and maintain remediation automation using Chef, Ansible, PowerShell, and Ruby.
• Convert recurring manual remediation steps into repeatable automated solutions and standardized runbooks.
• Ensure code follows internal engineering standards: version control, peer review, testing, documentation, and change management.
• Validate remediation effectiveness by re-scanning and verification of closure in Qualys or internal methods.
• Provide progress updates, metrics, and risk status to stakeholders.

Skills

Windows Server 2016/2019/2022

Qualys

Chef/Ruby or Ansible

PowerShell/Shell scripting

Playbooks

SCCM/WSUS

Triage

STIGs

Tools

VMware

Terraform

Ansible

Chef

SCCM/WSUS

Job description

CBTS seeks a Windows Wintel Vulnerability Remediation Engineer responsible for accelerating remediation across Microsoft Server 2016/2019/2022. The role utilizes Qualys, Chef, SCCM/WSUS, and PowerShell to identify, prioritize, implement, and verify fixes in alignment with compliance requirements.

Strong collaboration with Operations and engineering teams is essential. Remote, direct-hire position offering market pay.