WebOps Engineer – Vulnerability Remediation
Role Summary
Seeking a WebOps Engineer to support enterprise vulnerability remediation initiatives across web servers, middleware, web applications, and internet-facing platforms. The resource will work closely with Security, Infrastructure, Application, and DevOps teams to identify, remediate, validate, and deploy fixes for security vulnerabilities while maintaining platform stability.
Key Responsibilities
- Remediate vulnerabilities identified through security scans, penetration testing, and threat intelligence.
- Perform web server and middleware upgrades, patching, and configuration hardening (IIS, Apache, Nginx, Tomcat, etc.).
- Manage TLS/SSL certificates, encryption standards, and secure web configurations.
- Address findings related to OWASP, CVEs, TLS, DNS, HTTP/Security Headers, and certificate vulnerabilities.
- Support deployment, testing, and validation of remediation activities across lower and production environments.
- Partner with Security and Vulnerability Management teams to meet remediation SLAs.
- Participate in vulnerability review meetings, remediation waves, and closure validation activities.
Required Skills
- 5+ years of WebOps / Web Infrastructure administration experience.
- Strong knowledge of IIS, Apache, web application hosting, and load balancing.
- Experience with vulnerability remediation, patch management, and security hardening.
- Familiarity with TLS/SSL certificates, DNS, WAF, reverse proxies, and web security best practices.
- Experience supporting Windows and/or Linux web environments.
- Strong troubleshooting, automation, and scripting skills (PowerShell, Bash, Python preferred).
Preferred
- Experience with ServiceNow, vulnerability management platforms, and security scanning tools.
- Knowledge of OWASP Top 10, CVSS, KEV-based prioritization, and secure deployment practices.