Security Remediation Engineer

ALTEN is a world leader in Engineering and IT services with over 57,400 employees in 30+ countries, supporting more than 6,500 clients worldwide across multiple sectors including Aeronautics, Space, Defence, Security & Naval, Automotive, Rail & Mobility, Energy & Environment, Life Sciences & Health, Industrial Equipment & Electronics, Telecoms, Banking, Finance & Insurance, Retail, Services & Medias, and Public Services & Government.

• 6–8 years of senior hands-on engineering experience.
• Experience in vulnerability management or security remediation at scale in production environments.
• Working knowledge of web infrastructure, including CDN, WAF, TLS, DNS, HTTP security headers, and common web attack mitigations.
• Cloud platform experience, preferably with Azure (patching, configuration baselines, identity, and network controls).
• Ability to interpret, reproduce, and assess scanner findings within the architecture.
• Familiarity with vulnerability scoring and prioritization frameworks.
• Proven ability to drive work through non-direct reports using influence, clarity, and follow-through.
• Strong written English and confidence working with stakeholders across multiple countries and time zones.
• Experience with WAF policies and security controls.
• Experience with Sitecore or comparable enterprise CMS.
• Scripting and automation skills (Python, PowerShell, or similar) for tooling integration and reporting.
• Familiarity with regulated financial services environments and operational resilience expectations.
• Relevant certification (e.g., CISSP, OSCP, Azure Security Engineer Associate) or comparable practical expertise.

• Own the vulnerability position and maintain a consolidated view of all open findings across CDN, WAF, hosting, CMS, and application layers.
• Triage incoming findings by validating, deduplicating, and assessing their exploitability, then assign priorities and remediation deadlines.
• Challenge false positives and overstated severity ratings with evidence to focus engineering efforts on high-risk areas.
• Drive remediation by translating findings into actionable tasks for platform, Akamai, Azure, and Sitecore engineers.
• Collaborate with team leads to schedule remediation within sprints and change windows without disrupting ongoing projects.
• Provide hands-on technical support for complex fixes, including WAF rule tuning, patching, dependency upgrades, and mitigation design.
• Track remediation progress and verify that fixes resolve the findings rather than just suppressing symptoms.
• Own the patching cadence and currency of the platform estate, including operating systems, runtimes, CMS, and third-party components.
• Plan and coordinate patching campaigns across regions and maintenance windows.
• Identify and reduce structural causes of recurring vulnerabilities, such as unsupported versions, unmanaged dependencies, and configuration drift.
• Produce reports on vulnerability and patching status for leadership and risk functions.
• Evidence remediation against internal security policy timescales and support audit and regulatory requests.
• Represent the platform in security governance forums, remediation reviews, and risk acceptance discussions.
• Escalate issues effectively when necessary.

Klauzula informacyjna dotycząca przetwarzania Twoich danych osobowych jako potencjalnego pracownika i szczegółowe informacje prawne dotyczące przetwarzania danych osobowych zgodnie z przepisami RODO zawarte w ogłoszeniu.