Linux Vulnerability Remediation Engineer; Server Infrastructure RHEL

Required Qualifications

• 6-10 years of Strong hands-on experience with RHEL 7/8/9/10 in enterprise environments.
• Proven experience driving vulnerability remediation and patch management for Linux servers.
• Expertise with Qualys (or equivalent vulnerability scanners) including interpreting findings, false-positive validation, and closure verification.
• Automation experience with Chef and/or Ansible in production.
• Strong scripting skills:
  Bash , plus working proficiency in Ruby (or ability to maintain/extend existing Ruby codebases).
• Understanding of Linux security fundamentals (permissions, services, SSH hardening, package management, kernel considerations).
• Experience working with change management, incident/problem management, and coordinating across multiple support teams.

Preferred Qualifications

• Familiarity with compliance/security frameworks (e.g., CIS benchmarks, STIG concepts) as applied to Linux servers.
• Experience with CI/CD or automated testing for infrastructure code (linting, unit/integration testing where applicable).
• Experience operating in large-scale environments (hundreds/thousands of servers) with tiered production controls.
• Working knowledge of container host hardening and server-side runtime dependencies (if applicable to the server fleet).

Key Skills & Competencies

• Remediation prioritization and risk-based decision making
• Strong troubleshooting and root-cause analysis (package conflicts, dependency issues, service impacts)
• Clear communication and ability to drive closure across stakeholders
• Documentation discipline and audit readiness mindset
• Ability to deliver under tight timelines while maintaining system stability

Deliverables / Success Measures

• Reduction in open Patch NOW/Critical/High vulnerabilities and improved SLA compliance.
• Consistent, repeatable remediation through Chef/Ansible automation.
• Verified closures in Qualys with clear evidence and minimal re-open rates.
• Improved remediation cycle time for Meridian requirements and other prioritized findings.
• Fewer recurring vulnerability patterns through baseline improvements and preventive controls.