Cloud Vulnerability Management Engineer; Onsite Hybrid

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization,

We are currently seeking a Cloud Vulnerability Management Engineer (Onsite Hybrid) to join our team in Atlanta, Georgia (US-GA), United States (US).

Hybrid Cloud / Azure / AWS / Apache Spark

Cloud Vulnerability Management / Dev Sec Ops  / Cloud Security

• Manage the end-to-end vulnerability management lifecycle for enterprise applications and infrastructure hosted across hybrid cloud, Microsoft Azure, and AWS environments.
• Analyze vulnerability scan results and identify security vulnerabilities affecting cloud infrastructure, operating systems, containers, application dependencies, open-source libraries, and cloud-hosted data platforms.
• Perform vulnerability assessment and prioritization based on CVE/CVSS severity, exploitability, application criticality, external exposure, and overall business risk.
• Work closely with Application Development, Cloud Engineering, Dev Ops, SRE, Infrastructure, and Cybersecurity teams to define and execute vulnerability remediation plans.
• Support identification and remediation of vulnerabilities across AWS and Azure cloud services, Linux/Windows servers, Kubernetes, containers, Docker images, Java applications, and open-source components.
• Support vulnerability management for Apache Spark-based applications and data-processing platforms, including Spark runtime versions, Java/JVM dependencies, libraries, packages, and associated cloud infrastructure.
• Work with engineering teams to troubleshoot the technical root cause of vulnerabilities and recommend appropriate remediation, including patching, dependency upgrades, configuration changes, infrastructure changes, or compensating controls.
• Validate successful remediation through rescanning, technical verification, and security evidence collection.
• Track Critical and High vulnerabilities against established remediation SLAs and proactively elevate overdue vulnerabilities, blockers, and risks.
• Identify recurring vulnerability patterns and recommend systemic solutions and preventive controls to reduce repeat findings.
• Integrate vulnerability and security scanning into CI/CD and Dev Sec Ops  pipelines, enabling earlier identification of vulnerabilities during the software development lifecycle.
• Support cloud security posture assessments and remediation of configuration weaknesses across Azure, AWS, and hybrid-cloud environments.
• Develop scripts and automation to improve vulnerability identification, remediation tracking, validation, reporting, and compliance evidence collection.
• Create dashboards and reports covering open vulnerabilities, remediation aging, SLA compliance, risk acceptance, remediation trends, and vulnerability reduction.
• Participate in vulnerability governance and operational review meetings and communicate technical risks, remediation status, dependencies, and blockers to engineering and management stakeholders.

• Minimum 7+ years of experience in IT engineering, Cloud Engineering, Dev Ops/SRE, Cybersecurity, Application Security, or Vulnerability Management within enterprise environments.
• Minimum 4+ years of hands-on experience in Vulnerability Management / Application Security / Cloud Security, including vulnerability analysis, prioritization, remediation, and validation.
• Minimum 4+ years of experience working with public cloud technologies, with strong hands‑on knowledge of AWS and/or Microsoft Azure.
• Minimum 2+ years of experience supporting hybrid‑cloud or multi‑cloud environments, preferably involving application migration or transformation between Azure…