Senior Vulnerability & Cloud Security Engineer

NTT Data Americas, Inc.; Mahwah (NJ); In loco; USD 120.000 - 190.000; Tempo pieno

Descrizione del lavoro

NTT DATA is seeking a Senior Developer to join our security-focused team in Plano, TX. The role emphasizes vulnerability management, cloud-risk analysis (Wiz and GCP), and hands-on remediation across web, on-prem, and cloud environments.

The successful candidate will validate findings, drive verified closure, and produce actionable reports and dashboards with clear ownership and timelines. Strong collaboration with DevSecOps and application teams is required.

Competenze

• Must-Have 1: Technical judgment, false-positive review, and findings reporting.
• Must-Have 2: Vulnerability management operations.
• Must-Have 3: Qualys server vulnerability analysis.
• Must-Have 4: Wiz and GCP cloud-risk analysis.
• Must-Have 5: Web and on-premises application vulnerability remediation.
• Must-Have 6: Remediation coordination and ownership.
• Must-Have 7: Vulnerability reporting, dashboard development, and data-quality validation.

Mansioni

• Validate findings and remediation evidence; distinguish root cause from symptoms.
• Define remediation actions, owners, and timelines; ensure verified closure.
• Interpret Qualys findings; validate assets and versions; determine proper remediation.
• Assess Wiz and GCP risk; recommend least-privilege IAM changes and configurations.
• Remediate web and on-prem apps; fix weaknesses across stack; ensure testing and rollback.
• Translate scanner output into actionable remediation plans; coordinate owners.
• Design and maintain vulnerability reports and dashboards with accurate data.

Conoscenze

Technical judgment

Vulnerability remediation

Qualys analysis

Wiz and GCP

Web/app remediation

Remediation coordination

Vulnerability reporting

Strumenti

Terraform

Invicti

Descrizione del lavoro

NTT DATA is seeking a Senior Developer to join our security-focused team in Plano, TX. The role emphasizes vulnerability management, cloud-risk analysis (Wiz and GCP), and hands-on remediation across web, on-prem, and cloud environments.

The successful candidate will validate findings, drive verified closure, and produce actionable reports and dashboards with clear ownership and timelines. Strong collaboration with DevSecOps and application teams is required.