Vulnerability Engineer

JOB SUMMARY

This position is responsible for enterprise Windows endpoint administration, with significant ownership of vulnerability remediation, security baseline management, and the ongoing health of the Southern Company PC operating system environment. The role combines deep technical execution with strategy, cross-functional leadership, and continuous improvement to keep the Windows platform secure, current, resilient, and aligned with business needs.

• Acts as the Windows vulnerability subject matter expert, overseeing remediation processes and continuously improving enterprise vulnerability management practices
• Leads enterprise Windows OS and baseline vulnerability remediation efforts, including identification, prioritization, coordination, and validation of corrective actions
• Drives monthly patching and remediation activities for the PC environment, ensuring security updates are deployed effectively and risk is reduced in a timely manner
• Collaborates with the team to establish Windows OS standards, security baselines, and best‑practice PC configurations across Southern Company
• Partners with Security, Architecture, Engineering, and Support teams to drive timely remediation of Windows OS and baseline vulnerabilities across the enterprise
• Leads coordination with architects, support personnel, project managers, solution providers, and vendors to design, prioritize, and implement secure endpoint technologies and remediation initiatives
• Evaluates emerging technologies, security capabilities, and serves as a lead resource for proofs of concept, modernization efforts, and project delivery related to the Windows platform
• Maintains current Windows OS versions, strengthens baseline compliance, and advances adoption of the latest secure operating system features and capabilities

• Extensive knowledge of Windows operating systems, endpoint hardware, and enterprise desktop engineering
• Comprehensive knowledge of Southern Company software and hardware configurations, with the ability to apply standards consistently across the enterprise PC environment
• Working knowledge of network, server, and storage technologies
• Strong understanding of cybersecurity threats, vulnerability management, security baselines, and the importance of protecting the enterprise computing environment
• Ability to learn and apply modern technologies and concepts
• Ability to research solutions to problems and stay current with rapidly evolving technologies
• Excellent diagnostic, troubleshooting, analytical, and problem‑solving skills
• Programming and scripting skills using system‑level APIs and WMI, preferably with Power Shell, to automate remediation, configuration management, and reporting
• Experience with Windows 11 imaging, operating system deployment, baseline hardening, and patch and vulnerability remediation processes is strongly preferred

• Excellent verbal and written communication skills, including technical writing
• Works effectively in a team environment, including with geographically dispersed teams
• Ability to simplify complex subjects so they can be easily understood by non‑technical audiences
• High degree of focus on quality, reliability, efficiency, risk reduction, and measurable outcomes
• Thrives in a fast‑paced environment, adapts to changing priorities, and operates with minimal supervision
• Self‑motivated, takes initiative, drives issues to resolution, and removes obstacles to deliver results
• Ability to assess the impact of changes, quantify risk, and make sound decisions in complex, high‑visibility situations
• Travel as needed
• Excellent organizational skills and attention to detail
• Ability to manage and prioritize multiple responsibilities

• A four‑year bachelor’s degree in a computing or engineering field is strongly preferred
• Minimum of five years of experience in an IT‑related field

• Sets strategy, roadmaps, and standards for the Windows endpoint platform and leads the deployment of secure, scalable solutions
• Develops and executes test plans for the deployment of technology solutions, patches, configuration…