Vulnerability Remediation Engineer

About the role

The Vulnerability Remediation Engineer will lead the end‑to‑end process of identifying, prioritising and fixing security weaknesses across our infrastructure, applications, databases and networks. You will work closely with cross‑functional teams to ensure all vulnerabilities are remediated within defined service level agreements.

Key responsibilities

• Own and drive vulnerability remediation across all technology layers.
• Ensure remediation is completed within SLAs based on severity and risk.
• Prioritise work using risk scoring and business impact.
• Apply patches, configuration fixes and hardening for Windows, Linux and network devices.
• Validate fixes through re‑testing and verification.
• Review scan results, triage findings and support prioritisation.
• Identify security gaps, misconfigurations and deviations from best practices.
• Collaborate with teams to implement remediation actions.
• Prepare technical reports and executive summaries on remediation status and risk posture.
• Maintain alignment with frameworks such as NIST, ISO 27001 and CIS Benchmarks.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science or a related field.
• 3–7 years of experience in vulnerability management or remediation.
• Mandatory certifications: CEH or CompTIA Security+.

Required skills

• Hands‑on experience with Nessus, Qualys or Rapid7.
• Strong expertise in patch management and system hardening.
• Experience with SIEM, firewalls, IDS/IPS and endpoint security tools.
• Familiarity with cloud platforms (AWS, Azure, GCP).
• Scripting knowledge (Python, PowerShell or Bash) – a plus.