Cloud Vulnerability Remediation Engineer

Air InfoSec•Austin, TX

22h•Hybrid

About The Position

The Cloud Vulnerability Remediation Engineer will support the Texas Department of Transportation on the TxDOT cloud vulnerability management and compliance initiative. This role is responsible for identifying, assessing, and remediating security vulnerabilities within cloud infrastructure and platform services to reduce enterprise risk and maintain compliance with established security policies. The position focuses on coordinating patching, configuration changes, and compensating controls in alignment with approved vulnerability management and change management processes. The Engineer will work closely with Cloud Operations, Security, Application, and Risk teams to ensure vulnerabilities are remediated within required timelines. This role supports TxDOT's efforts to maintain secure, stable, and compliant cloud workloads.

Requirements

3 years of professional IT experience, with hands-on exposure to cloud infrastructure, system administration, or vulnerability remediation.
3 years of experience supporting cloud-hosted systems in at least one enterprise cloud environment.
3 years of experience with vulnerability remediation concepts, including patching, configuration hardening, and compensating controls.
3 years of experience with IT service management and change processes.
3 years of experience demonstrating strong analytical and documentation skills.
3 years of experience following defined security and remediation procedures.
3 years of experience applying effective communication and collaboration skills.

Nice To Haves

1 year of exposure to enterprise vulnerability management processes and remediation SLAs.
1 year of knowledge of cloud security posture management, security baselines, or risk reporting.
1 year of experience holding relevant cloud or security certifications.

Responsibilities

Review and analyze vulnerability findings affecting cloud-hosted resources identified through approved scanning and security tools.
Assess vulnerability applicability and risk impact across cloud infrastructure, platform services, and supporting components.
Plan and execute remediation actions, including patching, configuration changes, and security hardening, in accordance with established remediation timelines.
Validate remediation results and confirm successful closure of assigned vulnerability tasks.
Perform cloud-based patching and update activities for supported workloads using approved processes.
Implement cloud security configuration changes to reduce exposure when vendor patches are unavailable.
Create, update, and maintain remediation tasks and change records in the system of record to support audit and compliance requirements.
Ensure remediation activities comply with established change management, approval, and validation processes.
Provide remediation status updates and evidence for security reporting, audits, and leadership reviews.
Partner with Security, Cloud Architecture, and Application teams to resolve complex or cross-platform vulnerabilities.