Security Specialist

Job Summary:

We are looking for a skilled Security Patch Developer with expertise in securing containerized and virtualized environments. The ideal candidate will be responsible for developing, testing, and deploying security patches for containers (Docker, Kubernetes) and virtual machines (VMware, Hyper-V, AWS/GCP/Azure VMs). The role demands a strong understanding of security vulnerabilities, CVE analysis, patch management, and automation.

Key Responsibilities:

• Design, develop, and implement security patches for containerized applications and virtual machines.
• Analyze vulnerabilities, CVE reports, and security advisories to identify risks and mitigation strategies.
• Work with DevSecOps teams to integrate patching into CI/CD pipelines.
• Automate patch deployment using Ansible, Terraform, Helm, or Kubernetes Operators.
• Monitor security frameworks like CIS Benchmarks, NIST, and OWASP to ensure compliance.
• Troubleshoot and resolve issues arising from security patches and updates.
• Collaborate with cloud security teams to implement best security practices in container and VM environments.
• Conduct security audits, penetration testing, and vulnerability assessments.
• Document security fixes, configurations, and best practices.

Required Skills & Qualifications:

• 3-5+ years of experience in security patching and vulnerability management.
• Hands-on experience with containers (Docker, Kubernetes) and VMs (AWS EC2, GCP Compute, Azure VMs, VMware, Hyper-V).
• Proficiency in scripting and automation using Python, Bash, PowerShell, or Go.
• Strong knowledge of Linux (Ubuntu, RHEL, CentOS) and Windows Server security.
• Experience with patch management tools like WSUS, SCCM, Ansible, or Chef.
• Familiarity with security scanning tools like Aqua, Twistlock, Trivy, Clair, Qualys, or Nessus.
• Understanding of network security, firewalls, and IAM policies.
• Knowledge of CI/CD security integrations with GitHub Actions, GitLab CI/CD, Jenkins, or Azure DevOps.
• Good understanding of compliance frameworks (ISO 27001, SOC 2, PCI-DSS).