New

Vulnerability Engineer

Tata Consultancy Services
$100,000 - $120,000
sick time, 401(k)
United States, Kentucky, Louisville
Nov 04, 2026
Job Description The Vulnerability Remediation Engineer will be responsible for driving end-to-end remediation activities for vulnerabilities identified through Qualys scans, Penetration Testing (PT), Vulnerability Assessments (VA), Cloud Security Assessments, and Application Security Reviews across Platform, Cloud, and Go-based application environments. This is a techno-functional role requiring strong technical expertise in vulnerability remediation and security best practices, combined with the ability to coordinate cross-functional teams, manage stakeholder communications, drive remediation governance, and provide executive-level reporting. The role will act as the central point of coordination between Information Security, Platform Engineering, Cloud Operations, Application Development, Infrastructure Support, and Business Stakeholders to ensure timely remediation of security findings within established SLAs. Key Responsibilities Vulnerability Management & Governance * Enterprise vulnerability remediation efforts across Platform, Cloud, and Application environments. * Analyze and prioritize vulnerabilities identified through Qualys, Penetration Testing, and Security Assessments. * Establish remediation plans and drive closure of Critical, High, and Medium severity vulnerabilities. * Ensure adherence to vulnerability remediation SLAs and governance standards. * Conduct weekly remediation review meetings with technical and business stakeholders. * Maintain remediation trackers, risk registers, dashboards, and executive reports. * Drive accountability and ownership of remediation activities across multiple teams. * Coordinate vulnerability exception and risk acceptance processes when remediation is not feasible. Platform Security Remediation * Lead remediation activities across: * Windows Server Platforms * Linux Platforms (RHEL, CentOS, Ubuntu) * VMware and Virtualized Environments * Middleware Platforms (IIS, Apache, Tomcat, WebLogic) * Active Directory and Identity Services * Coordinate patch deployment, operating system upgrades, and security hardening activities. * Validate remediation effectiveness through rescans and verification testing. * Ensure compliance with CIS Benchmarks and enterprise hardening standards. Cloud Security Remediation * Drive remediation of security findings across cloud infrastructure. * Partner with cloud engineering teams to address vulnerabilities in: * Microsoft Azure * Amazon Web Services (AWS) * Kubernetes Platforms * Containerized Environments * Review cloud security posture recommendations and track remediation activities. * Coordinate implementation of cloud security best practices and configuration hardening. Page 1 Vulnerability Remediation Engineer * Support cloud compliance initiatives and security posture improvement programs. Application Security Remediation * Lead remediation efforts for vulnerabilities identified in Go (Golang) applications and services. * Work with Development, DevOps, and Application Owners to remediate: * Vulnerable libraries and dependencies * Security misconfigurations * Authentication and authorization vulner abilities * API Security findings * Container security vulnerabilities * OWASP Top 10 findings * Coordinate code fixes, dependency upgrades, and secure configuration updates. * Validate remediation through retesting and security reviews. * Promote Secure SDLC and DevSecOps adoption across application teams. Qualys VMDR Management * Serve as the primary coordinator for remediation activities driven by Qualys VMDR findings. * Review and analyze vulnerability data from Qualys scans. * Prioritize findings based on: * CVSS Scores * Qualys Severity Ratings * Asset Criticality * Exploit Availability * Business Impact * Coordinate remediation efforts and monitor progress to closure. * Manage validation scans and closure verification activities. * Generate operational and executive reporting from Qualys dashboards and data. * Track vulnerability trends and remediation performance metrics. Required Technical Skills Vulnerability Management * Strong hands-on experience with Qualys VMDR. * Vulnerability Assessment and Remediation Management. * CVE and CVSS Risk Analysis. * Vulnerability Prioritization and Risk-Based Remediation. * Security Hardening and Compliance Programs. Platform Technologies * Windows Server Administration. * Linux Administration (RHEL, CentOS, Ubuntu). * VMware / Virtualization Platforms. * Active Directory. * IIS, Apache, Tomcat, and Middleware Platforms. Cloud Technologies * Microsoft Azure. * Amazon AWS. * Microsoft Defender for Cloud. * Cloud Security Controls and Governance. Page 2 Vulnerability Remediation Engineer * Kubernetes. * Docker Containers. Application Technologies * Go (Golang) Application Ecosystems. * API Security. * Microservices Architecture. * CI/CD Pipelines. * GitHub, GitLab, Azure DevOps. Security Frameworks & Standards * OWASP Top 10. * CIS Benchmarks. * NIST Cybersecurity Framework. * Secure SDLC. * DevSecOps Practices. * Security Configuration Management. Functional Skills * Stakeholder Management. * Program and Project Coordination. * Executive Reporting and Communication. * Risk Management. * Vendor Coordination. * Security Governance. * Audit and Compliance Support. * Strong Presentation and Influencing Skills. Preferred Certifications * CISSP * CISM * CEH * Microsoft Azure Security Engineer Associate * AWS Security Specialty * Security+ * ITIL Foundation * PMP or Agile Certifications Key Deliverables * Vulnerability Remediation Roadmap. * Weekly Remediation Status Reports. * Executive Security Dashboards. * Qualys VMDR Metrics and Reporting. * Risk Acceptance and Exception Documentation. * Vulnerability Closure Validation Reports. * Penetration Test Remediation Tracking. * A udit and Compliance Evidence Repository. Page 3 Vulnerability Remediation Engineer Success Metrics * Closure of Critical Vulnerabilities within defined SLA. * Reduction in High-Risk Vulnerabilities across Platform, Cloud, and Application environments. * Timely remediation of CVIT/VITS Penetration Test findings. * Improvement in Qualys Vulnerability Scores and Compliance Metrics. * Reduction in repeat security findings. * Successful audit and compliance outcomes. * Effective stakeholder engagement and governance reporting. Ideal Candidate Profile A Techno-Functional Security Leader with strong experience in Qualys VMDR-based vulnerability management, Windows/Linux Platforms, Azure/AWS Cloud environments, and Go-based application security remediation. The candidate should be capable of translating security findings into actionable remediation plans while effectively coordinating Infrastructure, Cloud, Development, and Security teams to drive timely vulnerability closure and reduce organizational risk Salary Range: $100,000- $120,000 a year TCS Employee Benefits Summary: Discretionary Annual Incentive. Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans. Family Support: Maternal & Parental Leaves. Insurance Options: Auto & Home Insurance, Identity Theft Protection. Convenience & Professional Growth: Commuter Benefits & Certification & amp; Training Reimbursement. Time Off: Vacation, Time Off, Sick Leave & Holidays. Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing. #LI-SP1 Location Louisville, KY Function TECHNOLOGY Role Engineer ID 438373 Skills VMWare \| Vulnerability assessment Salary Range $100,000 - $120,000 Desired Candidate Profile Qualifications BACHELOR OF COMPUTER SCIENCE