Join our team as a WebOps Engineer, focusing on a critical enterprise vulnerability remediation program. This role is essential for safeguarding our web servers, middleware, web applications, and internet-facing platforms against security threats.

You will collaborate extensively with Security, Infrastructure, Application, and DevOps teams. The primary objective is to efficiently identify, address, confirm, and deploy solutions for security vulnerabilities, ensuring continuous platform stability and robust security posture.

Key responsibilities include actively remediating vulnerabilities identified through comprehensive security scans, penetration tests, and threat intelligence analysis.

You will be instrumental in performing essential web server and middleware operations, including upgrades, patching, and configuration hardening for technologies like IIS, Apache, Nginx, and Tomcat.

Furthermore, this role involves managing TLS/SSL certificates, ensuring compliance with encryption standards, and maintaining secure web configurations. Addressing specific findings related to OWASP, CVEs, TLS, DNS, HTTP/Security Headers, and certificate vulnerabilities is also a core function.

The position requires supporting the deployment, testing, and validation of all remediation activities across various environments, from development to production. You will partner closely with Security and Vulnerability Management teams to meet critical remediation Service Level Agreements (SLAs) and actively participate in vulnerability review meetings, remediation waves, and closure validation processes.

We are seeking candidates with a minimum of 5 years of dedicated experience in WebOps or Web Infrastructure administration.

A strong understanding of IIS, Apache, web application hosting principles, and load balancing techniques is essential.

Proven experience in vulnerability remediation, effective patch management, and robust security hardening practices is required.

Familiarity with TLS/SSL certificates, DNS, WAFs, reverse proxies, and current web security best practices is necessary.

Experience supporting both Windows and/or Linux web environments is a key requirement.

Excellent troubleshooting abilities, coupled with strong automation and scripting skills, particularly in PowerShell, Bash, or Python, will set candidates apart.