SME - NESSUS, Compliance Remediation
India
Apply now
Job Description
SME - NESSUS, Compliance Remediation
Bengaluru, Karnataka

Job Summary

Job Summary : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services. • Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Strong automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document. Job Description : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. \\\\r\\\\nPrimarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE\\\\r\\\\nKey Responsibilities\\\\r\\\\n• Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings.\\\\r\\\\n• Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers.\\\\r\\\\n• Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes.\\\\r\\\\n• Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration.\\\\r\\\\n• Hardening SSH configurations and addressing OpenSSH-related vulnerabilities.\\\\r\\\\n• Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services.\\\\r\\\\n• Securing exposed management interfaces and vulnerable network services.\\\\r\\\\n• Automating remediation activities using scripts, Power

Key Responsibilities

Job Responsibilities : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services. • Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Strong automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document.

 

Skill Requirements

Skill Requirement : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services. • Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Strong automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document.

 

Other Requirements

Other Requirement : Urgent requirement for a Server Security Engineer to support vulnerability remediation program for Internal Migration project. Looking for an experienced hands-on engineer who can drive remediation activities rather than purely advisory or reporting tasks. Primarily looking for Security engineer with MANDATORY skills experience in WINDOWS Server; LINUX knowledge is GOOD TO HAVE Key Responsibilities • Triaging the vulnerability backlog, validating exposure, and establishing ownership for findings. • Defining and implementing approved TLS, cipher, and SSH security baselines across Windows, Linux, web servers, Java runtimes, and load balancers. • Replacing self-signed and untrusted certificates with certificates issued from internal PKI and implementing automated renewal processes. • Applying Windows security policy remediations, including SMB signing and RDP Network Level Authentication through centralized administration. • Hardening SSH configurations and addressing OpenSSH-related vulnerabilities. • Migrating legacy protocols and services, including SNMPv3 adoption and removal of Telnet and other insecure services. • Securing exposed management interfaces and vulnerable network services. • Automating remediation activities using scripts, PowerShell, and Bash where applicable. • Producing audit-ready remediation evidence and documenting compensating controls where required. Required Skills & Experience • 6 - 10 years of infrastructure engineering or infrastructure security experience with proven large-scale remediation delivery. • Strong Windows Server administration and Group Policy expertise. • Hands-on experience with PKI, certificate management, TLS/SSL configuration, and cryptographic standards. • Experience with Red Hat Linux administration and OpenSSH hardening (Optional) • Familiarity with security remediation tools such as Wiz, Nessus, or Qualys. • Strong automation skills using Ansible, PowerShell, Python, or Bash. • Ability to work with application owners, assess compatibility risks, and execute structured change management processes. Preferred Experience • VMware security hardening. • CIS Benchmark or DISA STIG implementation. • Load balancer SSL profile configuration (NetScaler or HAPROXY or Equivalent). • Experience working in regulated or audited environments. Could you please help identify a suitable resource and share relevant profiles at the earliest? Given the urgency of the remediation effort, an experienced engineer who can start quickly would be highly appreciated. Please let me know if you need any additional information or a formal JD document.

 
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.