Senior Vulnerability Remediation Engineer

NTT DATA, Inc.; Plano (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

NTT DATA, Inc. invites applications for a Senior Developer to join our Plano, TX team. The candidate will lead vulnerability management across cloud and on‑prem environments, interpret findings, and drive validated remediation with end-to-end reporting.

Strong Qualys and Wiz/GCP experience required, plus ability to coordinate across DevSecOps teams. Location is Plano, US; remote/hybrid options may vary by client.

Qualifications

• Must have the ability to validate findings and remediation evidence, distinguish symptoms from root cause, and produce clear vulnerability reports with ownership, target dates, aging and closure evidence.
• Strong hands-on vulnerability remediation experience, ability to interpret findings, identify exposure and business impact, and drive verified closure.
• Deep experience interpreting Qualys server findings and determining remediation at OS/package/service/config level, with validation and rollback requirements.
• Strong Wiz and GCP cloud-risk analysis skills, interpreting IAM/network exposure, data sensitivity, and runtime context to recommend least-privilege changes and controls.
• Extensive web and on-prem remediation knowledge across web apps, APIs, databases, and server configurations, with actionable remediation guidance.
• Ability to translate scanner output into complete remediation plans for multiple teams, including ownership, dependencies, testing, rollback, and escalation.
• Ability to design, build, and maintain vulnerability reports and dashboards with clear metrics and trends.

Responsibilities

• Must-Have 1: Technical judgment, false-positive review, and findings reporting: validate findings and remediation evidence, distinguish symptoms from root cause, identify dependencies, verify whether a vulnerable component is loaded, reachable, or exploitable, and build clear vulnerability reporting.
• Must-Have 2: Vulnerability management operations: interpret findings, identify the vulnerable component and attack path, determine exposure and impact, distinguish root cause from scan symptom, and drive verified closure.
• Must-Have 3: Qualys server vulnerability analysis: interpret Qualys findings, validate assets, distinguish server vs application issues, and specify patching or isolation steps with rollback.
• Must-Have 4: Wiz and GCP cloud-risk analysis: interpret affected resource, IAM and network exposure, data sensitivity, determine least-privilege changes and corrections, and validate before implementation.
• Must-Have 5: Web and on-premises remediation: identify weaknesses, assess exploitability, provide actionable guidance and remediation steps with rollback and testing.
• Must-Have 6: Remediation coordination and ownership: translate scanner output into complete remediation plan with ownership and deadlines.
• Must-Have 7: Vulnerability reporting, dashboard development, and data-quality validation: design and maintain actionable reports and dashboards with remediation progress and business impact.
• Secondary 1: Terraform remediation support: understand Terraform remediation and route work to DevSecOps Run Team.
• Secondary 2: Reporting automation validation: test automated reports and correct data mappings.
• Secondary 3: Knowledge transfer and operational continuity: document recurring work and train another engineer.

Skills

Technical judgment

Vulnerability remediation

Qualys server findings

Wiz and GCP knowledge

Web and on-prem remediation

Remediation coordination

Vulnerability reporting

Tools

Qualys

Job description

NTT DATA, Inc. invites applications for a Senior Developer to join our Plano, TX team. The candidate will lead vulnerability management across cloud and on‑prem environments, interpret findings, and drive validated remediation with end-to-end reporting.

Strong Qualys and Wiz/GCP experience required, plus ability to coordinate across DevSecOps teams. Location is Plano, US; remote/hybrid options may vary by client.