Site Reliability Engineer – Vulnerability Remediation Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Assess, analyze, prioritize, and address infrastructure and configuration vulnerabilities identified via Wiz.

• Address AWS account, service, IAM, networking, and cloud configuration issues while applying cloud-native security best practices.

• Execute security hardening and remediation across both Windows Server and Linux environments.

• Set up and secure VMware-based infrastructure and virtual machine environments.

• Apply Kubernetes security best practices in Amazon EKS, Rancher, and kOps settings.

• Strengthen container platforms and workloads across the cluster, node, runtime, and workload layers.

• Create and implement Infrastructure-as-Code modifications to guarantee that remediations are repeatable, scalable, and sustainable.

• Adjust CI/CD pipelines and deployment workflows to avert the reintroduction of vulnerabilities and configuration issues.

• Collaborate with application, platform, cloud, infrastructure, and security teams to coordinate remediation efforts and tackle complex findings.

• Confirm that completed remediation activities are effective and that findings are accurately resolved and documented within Wiz.

• Develop scripts, tools, and automated remediation strategies using Python, Bash, PowerShell, and related technologies.

• Produce technical documentation, remediation standards, and reusable patterns for recurring infrastructure and security issues.

• Offer security engineering expertise and technical support to client teams throughout the engagement.

⛳️ Requirements

• Extensive experience in AWS administration and security, encompassing IAM, networking, account configuration, and cloud-native security controls.

• Significant experience in Kubernetes administration and security, particularly with Amazon EKS and Rancher; familiarity with kOps is advantageous.

• In-depth knowledge of container and container-platform security.

• Practical experience in Windows Server and Linux administration, configuration, troubleshooting, and operating system hardening.

• Proficient in administering and securing VMware infrastructure and virtual machine environments.

• Strong background in Infrastructure-as-Code; familiarity with Terraform is preferred.

• Experience in developing, maintaining, and securing CI/CD pipelines and deployment workflows.

• Strong scripting and automation capabilities using Python, Bash, and/or PowerShell.

• Experience in supporting vulnerability management programs and addressing Critical and High security findings.

• Familiarity with Wiz or another CNAPP/CSPM platform is highly preferred.

• Excellent troubleshooting and root-cause analysis abilities.

• Strong documentation skills and the ability to effectively communicate with stakeholders.

• Capacity to work efficiently across infrastructure, cloud, security, application, and platform engineering teams.

• AWS Certified Security – Specialty or a similar AWS certification is preferred.

• Kubernetes certifications such as CKA, CKAD, or CKS are preferred.

• Experience in implementing CIS Benchmarks and NIST security controls is preferred.

• Background in healthcare, payment processing, financial services, or other regulated sectors is preferred.

• Previous experience in supporting a large-scale vulnerability remediation engagement is preferred.

🏝️ Benefits

• Remote work arrangement.

• 3 months contract engagement.

• Equal opportunity employer.

• Interview accommodations or adjustments available upon request.

• Inclusive work environment.