Consultant - R01559026

Key Responsibilities:

Vulnerability Management & Remediation

• Perform end-to-end remediation of security vulnerabilities across cloud, on-prem, and hybrid environments.
• Use Wiz to triage vulnerabilities, analyze root causes, and implement remediation actions.
• Ensure timely closure of security findings with proper validation.

Operating System Security (Linux & Windows)

• Perform OS hardening, patch management, and configuration remediation for Linux and Windows systems.
• Fix security misconfigurations and enforce baseline security policies.
• Manage package-level and system-level vulnerability remediation.

Kubernetes & Container Security

• Remediate vulnerabilities in Azure Kubernetes Service (AKS) clusters including nodes and workloads.
• Secure container images through base image hardening and vulnerability patching.
• Manage container registry security and runtime protection practices.

Azure Cloud Security

• Work on Azure security services including identity, networking, storage, and platform security controls.
• Fix misconfigurations in Azure infrastructure and security posture management systems.
• Implement least-privilege access and secure cloud configurations.

Security Automation & Infrastructure as Code

• Use Terraform and Ansible for security automation and configuration management.
• Support automation for patch management, OS hardening, and compliance checks.
• Reduce configuration drift through standardized automation practices.

IAM & Access Control

• Implement and manage IAM, RBAC, and privileged access controls.
• Participate in access reviews and ensure compliance with security policies.
• Strengthen identity security across cloud environments.

Monitoring, Audits & Compliance

• Participate in security audits, vulnerability assessments, and compliance reviews.
• Support continuous security posture improvement initiatives.
• Maintain runbooks, remediation guides, and documentation.

Collaboration & Support

• Work closely with DevOps, platform, and application teams to remediate vulnerabilities.
• Provide technical guidance on OS, cloud, and container security issues.
• Communicate remediation actions and trade-offs clearly to engineering teams.