Remote Linux Vulnerability Engineer

Required Skills & Experience

Requirements:

• 6-8 years of Linux engineering experience (RHEL 7/8/9/10) in enterprise environments
• Proven experience driving vulnerability remediation and patch management for Linux servers
• Automation experience with Chef in production
• Strong communication skills – customer facing

Nice to Have Skills & Experience

• Strong scripting skills: Bash, plus working proficiency in Ruby (or ability to maintain/extend existing Ruby codebases).

Job Description

An employer is looking for a Remote Linux Vulnerability Engineer in the United States. The Linux Vulnerability Engineer is responsible for accelerating vulnerability remediation and patching activities across server infrastructure . This role focuses on Red Hat Enterprise Linux (RHEL) 7/8/9/10 and leverages existing automation and scanning technologies (e.g., Qualys, Chef, Ansible, shell scripting, Ruby) to identify, prioritize, implement, validate, and close vulnerabilities in alignment with internal compliance requirements (e.g., Meridian requirements). The engineer partners closely with operations, Engineering Teams , application owners, and support teams to deliver timely fixes while maintaining server stability and change discipline

Key Responsibilities:

Vulnerability Remediation & Patch Management

• Own and execute end-to-end remediation for vulnerabilities identified on Linux servers (RHEL 7/8/9), including OS/package patching and configuration hardening.
• Fast-track and manage all Meridian-related remediation requirements as they are received, ensuring adherence to defined SLAs and audit expectations.
• Triage vulnerability findings (primarily from Qualys) and translate them into actionable remediation plans, considering exploitability, criticality, asset tiering, and operational risk.
• Coordinate remediation activities for: o Kernel and package updates (YUM/DNF), security errata, and required reboots where applicable. o CIS/STIG-aligned configuration changes (as applicable in the environment). o Mitigations/compensating controls when immediate patching is not feasible (documented and approved per process). Automation, Configuration Management & Engineering
• Develop, enhance, and maintain remediation automation using: o Chef (cookbooks/recipes, attributes, templates, policy files as applicable) o Ansible (playbooks, roles, inventories, modules) o Shell scripting (Bash) and Ruby for server-side automation and custom remediation logic
• Convert recurring manual remediation steps into repeatable automated solutions and standardized runbooks.
• Ensure code follows internal engineering standards: version control, peer review, testing, documentation, and change management. Validation, Closure & Reporting
• Validate remediation effectiveness by re-scanning and verifying closure in Qualys (and/or approved internal validation methods).
• Confirm fixes did not introduce regressions; coordinate with application and platform teams for post-change verification.
• Maintain accurate documentation of remediation actions, approvals, exceptions, and closure evidence to support audit and compliance needs.
• Provide progress updates, metrics, and risk status to stakeholders (e.g., open critical/high items, aging items, SLA adherence). Cross-Team Coordination & Operational Execution
• Schedule and lead remediation calls with infrastructure support teams, application owners, and other stakeholders to drive timely execution.
• Work within change management processes: create/execute change plans, develop rollback steps, and coordinate maintenance windows.
• Partner with platform engineering to improve standard server baselines and prevent vulnerability recurrence. Vendor & Release Coordination (as needed)
• Follow up with vendors (e.g., Red Hat or software providers) for patch availability, release schedules, and remediation guidance when vulnerabilities require vendor action.
• Track advisories (RHSA/RHBA) and coordinate planned rollout timelines where applicable.