Engineer Vulnerability Remediation

JetBlue Airways Corporation•New York, NY

8d•$72,700 - $98,000•Onsite

About The Position

The Vulnerability Remediation Engineer is responsible for improving the organization’s security posture through the identification, prioritization, remediation, and prevention of infrastructure vulnerabilities across enterprise infrastructure. This role focuses on vulnerability management, patch automation, security compliance, and remediation engineering across Windows and Linux platforms while minimizing operational risk and service disruption. The position partners closely with Infrastructure, Cybersecurity, Cloud, and Application Support teams to implement scalable remediation strategies, improve compliance metrics, reduce threat exposure, and strengthen overall system resiliency. The ideal candidate brings strong experience in vulnerability remediations, enterprise patch management, automation, and infrastructure security operations within large scale environments.

Requirements

Bachelor’s Degree in a relevant field; OR demonstrated capability to perform job responsibilities with a High School Diploma/GED and at least four (4) years of previous relevant work experience
Three (3) years of experience with server vulnerability remediation experience
Three (3) years of experience supporting server administration, vulnerability remediation, patch management, or infrastructure security operations
Experience with enterprise patch management and vulnerability management tools such as Microsoft SCCM, MECM, WSUS, Tanium, BigFix, Ivanti, Qualys, Rapid7, Nucleus or Tenable
Experience with automation and scripting technologies such as PowerShell, Python, Bash, or Ansible
Knowledge of Windows Server and Linux operating systems, including patching methodologies and security hardening practices
Understanding of cybersecurity frameworks, vulnerability risk scoring, and remediation prioritization methodologies
Experience troubleshooting patch deployment issues and coordinating remediation activities across multiple technology teams
Strong analytical, organizational, and problem-solving skills with the ability to manage multiple priorities in a fast-paced environment
Excellent written and verbal communication skills
Ability to work independently and collaboratively within cross-functional teams
Available for occasional after-hours maintenance activities or emergency remediation support as required
Available for occasional overnight travel (10%)
Must pass a pre-employment drug test
Must be legally eligible to work in the country in which the position is located
Authorization to work in the US is required. This position is not eligible for visa sponsorship

Nice To Haves

Experience supporting remediation activities across hybrid cloud and on-premises infrastructure environments preferred.
Bachelor’s Degree & certifications in a relevant field
Five (5) years of experience supporting server administration, vulnerability remediation, patch management, or infrastructure security operations
Experience in server vulnerability engineering, including vulnerability scanning platforms, remediation orchestration, and secure configuration management.

Responsibilities

Lead remediation of server and infrastructure vulnerabilities across Windows and Linux environments in accordance with established service level agreements (SLAs) and security policies, and compliance standards.
Engineer, implement, and optimize automated patch management and remediation workflows to improve deployment efficiency, compliance, and reporting accuracy.
Perform vulnerability assessments, analyze scan results, and prioritize remediation activities using risk-based methodologies (CVSS, business impact, exploitability).
Collaborate with Infrastructure, Cybersecurity. Cloud, and Application teams to coordinate remediation schedules, maintenance windows, and operational readiness.
Develop and maintain patch management procedures, remediation runbooks, compliance reporting, and operational documentation.
Monitor remediation success rates, vulnerability trends, compliance metrics, and remediation lifecycle effectiveness to identify continuous improvement opportunities.
Troubleshoot patch deployment failures, configuration issues, system compatibility concerns, and remediation exceptions.
Support audits, regulatory compliance initiatives, and security assessments through accurate reporting and documentation of remediation activities.
Identify opportunities for automation, process optimization, and operational efficiency using scripting and configuration management tools.
Partner with Security Operations and Infrastructure Engineering teams to reduce cyber risk exposure and improve overall infrastructure resilience.
Stay current with emerging vulnerabilities, threat trends, patching technologies, and industry best practices.
Participate in after-hours maintenance windows and emergency remediation activities as required.