Job Summary

Job Summary : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services. • Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Strong automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document. Job Description : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. \\r\\nPrimarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE\\r\\nKey Responsibilities\\r\\n• Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings.\\r\\n• Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers.\\r\\n• Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes.\\r\\n• Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration.\\r\\n• Hardening SSH configurations and addressing OpenSSH-related vulnerabilities.\\r\\n• Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services.\\r\\n• Securing exposed management interfaces and vulnerable network services.\\r\\n• Automating remediation activities using scripts, Power

Key Responsibilities

Job Responsibilities : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project.



Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services. • Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Strong automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document.

Skill Requirements

Skill Requirement : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services.



• Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Solid automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document.

Must Have Skill

Nessus,Vulnerability & Compliance Remediation

Good to Have Skill

Other Requirements

Other Requirement : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services. • Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Strong automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document.

📌 SME - NESSUS, Compliance Remediation (India)
🏢 HCLTech
📍 India