Remote Jobs RockRemote Jobs Rock

Senior Tech Specialist, Security - R01571854

๐Ÿ•’ 24 days ago
WizLinux SecurityWindows SecurityAzure
Apply Now

๐Ÿ“œ Description

  • Triage vulnerabilities in Wiz, identify root causes, define fixes, and drive findings to closure.
  • Patch and harden Linux and Windows systems, AKS clusters, container images, and registries.
  • Apply security baselines and remediate cloud posture, identity, networking, and storage misconfigurations.
  • Partner with DevOps, platform, and application teams to resolve security issues in build and deployment pipelines.
  • Automate hardening, patch management, configuration drift detection, and compliance checks using Terraform and Ansible.
  • Support IAM and privileged access reviews, audits, security assessments, documentation, and engineer guidance.

๐Ÿ› ๏ธ Requirements

  • 7โ€“9 years in infrastructure, cloud, or platform security roles.
  • Mandatory hands-on experience securing both Linux and Windows in enterprise environments.
  • Hands-on experience remediating vulnerabilities in AKS clusters, container images, and OS platforms.
  • Understanding golden image patching and hardening concepts.
  • Proven experience closing vulnerabilities, not just reporting them.
  • Kubernetes and container security experience is required.
  • AZ-500 preferred; CISSP or CCSP is a plus.
Full job description
Senior Tech Specialist, Security

Job requirements

Infra & Cloud Security Specialist Role Summary Hands-on Infra & Cloud Security Specialist is responsible for identifying, solutioning, and remediating vulnerabilities across on-prem and Azure-centric environments. This role is execution heavy. You will work directly on Linux, Windows, AKS, and container security issues and take ownership from finding to closure, while following defined security standards and automation practices. When vulnerabilities show up, you donโ€™t just flag them. You fix them. Key Responsibilities
  • Perform hands-on vulnerability remediation across cloud, on-prem, and hybrid environments.
  • Use Wiz to triage vulnerabilities, analyze root causes, define remediation actions, and drive closure.
  • Remediate vulnerabilities across:
  • Linux and Windows OS (patching, hardening, configuration fixes)
  • Azure Kubernetes Service (AKS) clusters
  • Container images and registries
  • Implement and adhere to defined security baselines for Azure infrastructure and platform services.
  • Fix misconfigurations across ACS / cloud security posture controls, identity, networking, and storage.
  • Work closely with DevOps, platform, and application teams to remediate security issues in building and deployment pipelines.
  • Execute and support automation for:
  • OS and image hardening
  • Patch management
  • Configuration drift and compliance checks
  • Support IAM, RBAC, and privileged access controls implementation and reviews.
  • Participate in audits, security assessments, and vulnerability review discussions.
  • Create and maintain remediation documentation, runbooks, and implementation guides.
  • Support engineers with practical guidance on OS, cloud, and container security remediation.
  • Technical Competencies
  • Hands-on experience using Wiz for vulnerability identification and remediation tracking.
  • Strong expertise in Linux and Windows OS security, including:
  • OS hardening
  • Patch remediation
  • Configuration and package-level fixes
  • Practical experience remediating vulnerabilities in AKS clusters, including nodes and workloads.
  • Good understanding of container security, including:
  • Image vulnerabilities
  • Base image hardening
  • Registry and runtime considerations
  • Working knowledge of Azure security services, identity, networking, and storage security.
  • Experience using Terraform and Ansible for remediation or security automation.
  • Understanding of cloud security posture management, IAM concepts, and least privilege models.
  • Configuring firewalls, VPNs, access control and conditional access policy, and security patches.
  • Managing cloud security services (e.g., Entra ID), ensuring compliance with security best practices and regulatory requirements.
  • Managing certificates and secure configurations.
  • Managing SCA, SAST, DAST and Secrets Platforms and governance
  • Behavioral Competencies
  • Strong ownership mindset and execution focus.
  • Solution-oriented approach to security findings.
  • Clear communicator with engineers and platform teams.
  • Comfortable explaining remediation actions and trade-offs.
  • Values clean documentation and repeatable processes.
  • Experience & Qualifications
  • 7โ€“9 years in infrastructure, cloud, or platform security roles.
  • Mandatory hands-on experience securing both Linux and Windows in enterprise environments.
  • Hands-on experience remediating vulnerabilities in AKS clusters, container images, and OS platforms.
  • Understanding golden image patching and hardening concepts.
  • Proven experience closing vulnerabilities, not just reporting them.
  • Kubernetes and container security experience is required.
  • AZ-500 preferred; CISSP or CCSP is a plus.
  • Lingokids

    Sr. Application Security Engineer

    ๐Ÿ•’ 2 days ago
    Lingokids๐Ÿ‘ฅ 51 - 200 employees๐Ÿข Entertainment

    Own application security across mobile apps, backend services, APIs, and AWS infrastructure, partnering with engineering teams to prevent vulnerabilities, strengthen delivery pipelines, and protect childrenโ€™s privacy.

    Application SecurityReact NativeRubyJavaScript
    AJ Bell

    Information Security Engineer

    ๐Ÿ•’ 2 days ago
    AJ Bell๐Ÿ‘ฅ 1001 - 5000 employees๐Ÿข Financial Services

    Design, implement and improve enterprise security controls, platforms and infrastructure across cloud, endpoint, network and DevOps environments, helping detect, prevent and respond to threats.

    Enterprise Security PlatformsSecurity Risk ManagementSIEMPAM
    Abcbrasil

    Analista de Seguranรงa da Informaรงรฃo SR - AppSec Application Security

    ๐Ÿ•’ 2 days ago
    Abcbrasil๐Ÿ‘ฅ 1001 - 5000 employees๐Ÿข Banking

    Lidera tecnicamente o programa de Application Security, evoluindo o SSDLC e integrando controles automatizados ร s pipelines para reduzir riscos e promover prรกticas seguras junto ร s equipes de engenharia.

    Application Security (appsec)SSDLCExploraรงรฃo De Vulnerabilidades Web E APIsSAST
    MUFG Investor Services

    Junior Associate Director, IT, IAM & PAM Technical Lead

    ๐Ÿ•’ 2 days ago
    MUFG Investor Services๐Ÿ‘ฅ 1001 - 5000 employees๐Ÿข Financial Services

    Leads the design, operation, and evolution of privileged access management while supporting IAM and identity governance initiatives, strengthening security controls across infrastructure, cloud, and enterprise systems.

    Privileged Access Management (pam)Identity And Access Management (iam)Identity Governance And Administration (iga)Cyberark
    Snowflake

    Senior Security Engineer - Enterprise Security

    ๐Ÿ•’ 3 days ago
    Snowflake๐Ÿ‘ฅ 10,000+ employees๐Ÿข Software Development

    Deploy and scale endpoint security across a multi-cloud, multi-SaaS environment, automate detection and response, investigate incidents, and drive vulnerability remediation and zero-trust protections.

    Endpoint SecurityEDRDLPMDM

    Trusted by Remote Workers