Vulnerability Remediation Engineer

Mindbox is a tech-driven company connecting top IT talents with technology projects for leading enterprises across Europe, focusing on consulting, engineering, and building digital solutions.

• Strong, hands-on CI/CD expertise with Jenkins, GitHub workflows, and pipeline troubleshooting.
• Scripting proficiency in Python, Bash, PowerShell, and/or Groovy.
• Practical experience in automation development to improve remediation processes.
• Ability to work collaboratively across international teams, managing time zones effectively.
• Fluent English (written and spoken), clear communicator with problem-solving focus.

Nice to have:

• Previous experience in infrastructure, security engineering, or vulnerability management roles.
• Familiarity with containers, cloud platforms, and DevSecOps practices.
• Interest or experience in AI-assisted security — integrating LLMs (OpenAI, Anthropic, etc.) for remediation workflows.
• Self-driven, positive mindset, and aptitude for exploring emerging technologies.

• Triage and validate vulnerability findings from scanning tools and security advisories (e.g., CVE-based data).
• Manage the full remediation lifecycle: planning, execution, and verification.
• Partner with engineering teams to implement fixes across OS, middleware, applications, containers, and cloud services.
• Prioritise remediation using risk-based factors such as exploitability, asset criticality, and business impact.
• Coordinate and support change execution while ensuring minimal disruption to services.
• Troubleshoot patching issues including dependency conflicts and failed deployments, ensuring root-cause resolution.
• Maintain and enhance remediation runbooks, SOPs, and automation patterns for speed and scalability.
• Track key performance metrics such as SLA compliance, backlog aging, and exception handling.
• Contribute to continuous improvement by reducing false positives and streamlining vulnerability lifecycle processes.