Vulnerability Engineer

Tata Consultancy Services; Louisville (KY); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Discretionary annual incentive

Comprehensive medical coverage

Training and certification support

Job summary

Tata Consultancy Services in Louisville, KY is seeking a Vulnerability Remediation Engineer to drive end‑to‑end remediation across Platform, Cloud, and Go‑based applications. This techno‑functional role requires coordinating cross‑functional teams, managing remediation governance, and delivering executive reporting.

The ideal candidate will lead remediation efforts for Windows/Linux, cloud, and application ecosystems, ensuring timely closure of critical vulnerabilities while maintaining CIS

Qualifications

• 5+ years in vulnerability remediation and governance.
• Experience with Qualys VMDR and CVE analysis.
• Strong cross‑functional coordination across security, platform, cloud, and app teams.
• Experience with Windows/Linux, cloud security, and security hardening.

Responsibilities

• Lead end‑to‑end vulnerability remediation across platforms and cloud.
• Coordinate remediation governance and stakeholder communications.
• Maintain remediation trackers, dashboards, and executive reports.
• Drive remediation SLAs and track closure with cross‑functional teams.

Skills

Qualys VMDR

Vulnerability remediation

CVE/CVSS analysis

Security governance

Stakeholder management

Education

Bachelor of Computer Science

Tools

Windows Server

Linux Admin

VMware

Active Directory

IIS

Apache

Tomcat

WebLogic

Docker

Kubernetes

Job description

Job Description

The Vulnerability Remediation Engineer will be responsible for driving end-to-end remediation activities for vulnerabilities identified through Qualys scans, Penetration Testing (PT), Vulnerability Assessments (VA), Cloud Security Assessments, and Application Security Reviews across Platform, Cloud, and Go-based application environments.

This is a techno-functional role requiring strong technical expertise in vulnerability remediation and security best practices, combined with the ability to coordinate cross‑functional teams, manage stakeholder communications, drive remediation governance, and provide executive-level reporting.

The role will act as the central point of coordination between Information Security, Platform Engineering, Cloud Operations, Application Development, Infrastructure Support, and Business Stakeholders to ensure timely remediation of security findings within established SLAs.

Key Responsibilities

Vulnerability Management & Governance

• Enterprise vulnerability remediation efforts across Platform, Cloud, and Application environments.
• Analyze and prioritize vulnerabilities identified through Qualys, Penetration Testing, and Security Assessments.
• Establish remediation plans and drive closure of Critical, High, and Medium severity vulnerabilities.
• Ensure adherence to vulnerability remediation SLAs and governance standards.
• Conduct weekly remediation review meetings with technical and business stakeholders.
• Maintain remediation trackers, risk registers, dashboards, and executive reports.
• Drive accountability and ownership of remediation activities across multiple teams.
• Coordinate vulnerability exception and risk acceptance processes when remediation is not feasible.

Platform Security Remediation

• Lead remediation activities across:
  • Windows Server Platforms
  • Linux Platforms (RHEL, CentOS, Ubuntu)
  • VMware and Virtualized Environments
  • Middleware Platforms (IIS, Apache, Tomcat, WebLogic)
  • Active Directory and Identity Services
• Coordinate patch deployment, operating system upgrades, and security hardening activities.
• Validate remediation effectiveness through rescans and verification testing.
• Ensure compliance with CIS Benchmarks and enterprise hardening standards.

Cloud Security Remediation

• Drive remediation of security findings across cloud infrastructure.
• Partner with cloud engineering teams to address vulnerabilities in:
  • Microsoft Azure
  • Amazon Web Services (AWS)
  • Kubernetes Platforms
  • Containerized Environments
• Review cloud security posture recommendations and track remediation activities.
• Coordinate implementation of cloud security best practices and configuration hardening.
• Support cloud compliance initiatives and security posture improvement programs.

Application Security Remediation

• Lead remediation efforts for vulnerabilities identified in Go (Golang) applications and services.
• Work with Development, DevOps, and Application Owners to remediate:
  • Vulnerable libraries and dependencies
  • Security misconfigurations
  • Authentication and authorization vulnerabilities
  • API Security findings
  • Container security vulnerabilities
  • OWASP Top 10 findings
• Coordinate code fixes, dependency upgrades, and secure configuration updates.
• Validate remediation through retesting and security reviews.
• Promote Secure SDLC and DevSecOps adoption across application teams.

Qualys VMDR Management

• Serve as the primary coordinator for remediation activities driven by Qualys VMDR findings.
• Review and analyze vulnerability data from Qualys scans.
• Prioritize findings based on:
  • CVSS Scores
  • Qualys Severity Ratings
  • Asset Criticality
  • Exploit Availability
  • Business Impact
• Coordinate remediation efforts and monitor progress to closure.
• Manage validation scans and closure verification activities.
• Generate operational and executive reporting from Qualys dashboards and data.
• Track vulnerability trends and remediation performance metrics.

Required Technical Skills

Vulnerability Management

• Strong hands‑on experience with Qualys VMDR.
• Vulnerability Assessment and Remediation Management.
• CVE and CVSS Risk Analysis.
• Vulnerability Prioritization and Risk‑Based Remediation.
• Security Hardening and Compliance Programs.

Platform Technologies

• Windows Server Administration.
• Linux Administration (RHEL, CentOS, Ubuntu).
• VMware / Virtualization Platforms.
• Active Directory.
• IIS, Apache, Tomcat, and Middleware Platforms.

Cloud Technologies

• Microsoft Azure.
• Amazon AWS.
• Microsoft Defender for Cloud.
• Cloud Security Controls and Governance.
• Kubernetes.
• Docker Containers.

Application Technologies

• Go (Golang) Application Ecosystems.
• API Security.
• Microservices Architecture.
• CI/CD Pipelines.
• GitHub, GitLab, Azure DevOps.

Security Frameworks & Standards

• OWASP Top 10.
• CIS Benchmarks.
• NIST Cybersecurity Framework.
• Secure SDLC.
• DevSecOps Practices.
• Security Configuration Management.

Functional Skills

• Stakeholder Management.
• Program and Project Coordination.
• Executive Reporting and Communication.
• Risk Management.
• Vendor Coordination.
• Security Governance.
• Audit and Compliance Support.
• Strong Presentation and Influencing Skills.

Preferred Certifications

• CISSP
• CISM
• CEH
• Microsoft Azure Security Engineer Associate
• AWS Security Specialty
• Security+
• ITIL Foundation
• PMP or Agile Certifications

Key Deliverables

• Vulnerability Remediation Roadmap.
• Weekly Remediation Status Reports.
• Executive Security Dashboards.
• Qualys VMDR Metrics and Reporting.
• Risk Acceptance and Exception Documentation.
• Vulnerability Closure Validation Reports.
• Penetration Test Remediation Tracking.
• A udit and Compliance Evidence Repository.

Success Metrics

• Closure of Critical Vulnerabilities within defined SLA.
• Reduction in High‑Risk Vulnerabilities across Platform, Cloud, and Application environments.
• Timely remediation of CVIT/VITS Penetration Test findings.
• Improvement in Qualys Vulnerability Scores and Compliance Metrics.
• Reduction in repeat security findings.
• Successful audit and compliance outcomes.
• Effective stakeholder engagement and governance reporting.

Ideal Candidate Profile

A Techno-Functional Security Leader with strong experience in Qualys VMDR-based vulnerability management, Windows/Linux Platforms, Azure/AWS Cloud environments, and Go-based application security remediation. The candidate should be capable of translating security findings into actionable remediation plans while effectively coordinating Infrastructure, Cloud, Development, and Security teams to drive timely vulnerability closure and reduce organizational risk.

Salary Range: $100,000- $120,000 a year

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Louisville, KY

Function

TECHNOLOGY

Role

Engineer

ID

438373

Skills

VMWare | Vulnerability assessment

Salary Range

$100,000 - $120,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE