Principal Cloud Security and Vulnerability

Serve as the technical cloud security leader for enterprise-wide patching and vulnerability management initiatives across hybrid infrastructure environments, including on-premises systems and AWS cloud platforms. Partner closely with infrastructure, platform engineering, and security teams to strengthen the organization’s cyber resilience, accelerate remediation efforts, and drive operational excellence., * Lead and coordinate enterprise patch management and vulnerability remediation programs across server, network, and cloud environments, ensuring alignment, accountability, and consistent execution.

• Design and enhance workflows, automation strategies, and governance frameworks that improve vulnerability management effectiveness and streamline operations.
• Drive integration and optimization of security technologies, including Qualys and ServiceNow Security Vulnerability Response (SVR), to increase visibility, tracking, and remediation efficiency.
• Develop and mature patching strategies that support rapid, risk-based vulnerability remediation while maintaining stability in highly available, 24/7 production environments.
• Provide technical leadership across both traditional infrastructure and AWS cloud ecosystems, establishing consistent security and patching standards across all platforms.
• Identify opportunities for automation, process improvement, and innovation to reduce remediation timelines and strengthen overall operational security posture.
• Mentor and collaborate with cross-functional teams, fostering knowledge sharing, continuous learning, and a culture of security-focused operations.

Core Expertise:

• Vulnerability Management & Risk-Based Remediation
• Enterprise Patch Lifecycle Management
• Hybrid Infrastructure Security (On-Premises & AWS)
• Qualys Vulnerability Management
• ServiceNow Security Vulnerability Response (SVR)
• CVE Analysis, CVSS Scoring & Prioritization
• Zero-Day & Critical Vulnerability Response
• Windows Server, Linux (RHEL), VMware/vSphere Administration
• Security Automation & Workflow Optimization
• Cross-Functional Leadership & Stakeholder Management

• 10+ years of experience in vulnerability management, patch management, IT operations, or cybersecurity.
• Strong background in server, network, and cloud administration with expertise in securing complex hybrid environments.
• Proven success leading enterprise remediation efforts and influencing cross-functional teams without direct authority.
• Bachelor’s degree in Computer Science, Engineering, Information Technology, or equivalent experience.
• Industry certifications such as CISSP, ITIL, CCSP or related credentials preferred.