Software Development Advisor

WebOps Engineer – Vulnerability Remediation

Role Summary
Seeking a WebOps Engineer to support enterprise vulnerability remediation initiatives across web servers, middleware, web applications, and internet-facing platforms. The resource will work closely with Security, Infrastructure, Application, and DevOps teams to identify, remediate, validate, and deploy fixes for security vulnerabilities while maintaining platform stability.

Key Responsibilities

• Remediate vulnerabilities identified through security scans, penetration testing, and threat intelligence.
• Perform web server and middleware upgrades, patching, and configuration hardening (IIS, Apache, Nginx, Tomcat, etc.).
• Manage TLS/SSL certificates, encryption standards, and secure web configurations.
• Address findings related to OWASP, CVEs, TLS, DNS, HTTP/Security Headers, and certificate vulnerabilities.
• Support deployment, testing, and validation of remediation activities across lower and production environments.
• Partner with Security and Vulnerability Management teams to meet remediation SLAs.
• Participate in vulnerability review meetings, remediation waves, and closure validation activities.

Required Skills

• 5+ years of WebOps / Web Infrastructure administration experience.
• Strong knowledge of IIS, Apache, web application hosting, and load balancing.
• Experience with vulnerability remediation, patch management, and security hardening.
• Familiarity with TLS/SSL certificates, DNS, WAF, reverse proxies, and web security best practices.
• Experience supporting Windows and/or Linux web environments.
• Strong troubleshooting, automation, and scripting skills (PowerShell, Bash, Python preferred).

Preferred

• Experience with ServiceNow, vulnerability management platforms, and security scanning tools.
• Knowledge of OWASP Top 10, CVSS, KEV-based prioritization, and secure deployment practices.