Vulnerability Remediation Engineer

Technologies we use

Expected

• Jenkins
• GitHub workflows
• Python
• Bash
• PowerShell
• Groovy

Optional

• containers
• cloud platforms
• DevSecOps
• LLMs
• OpenAI
• Anthropic

About the project

We are hiring a Vulnerability Remediation Engineer to ensure end-to-end remediation of security vulnerabilities across diverse technology environments. This position is delivery-focused, requiring analytical rigor and strong technical execution capabilities to minimize risk exposure effectively.

You will validate vulnerabilities, prioritise remediation, and work closely with global engineering teams to execute patches and verify fixes—all while reducing operational impact and maintaining compliance with change control processes.

Sounds like your kind of challenge?

Your responsibilities

• Triage and validate vulnerability findings from scanning tools and security advisories (e.g., CVE-based data).
• Manage the full remediation lifecycle: planning → execution → verification.
• Partner with engineering teams to implement fixes across OS, middleware, applications, containers, and cloud services.
• Prioritise remediation using risk-based factors (exploitability, asset criticality, business impact).
• Coordinate and support change execution while ensuring minimal disruption to services.
• Troubleshoot patching issues (e.g., dependency conflicts, failed deployments) and ensure root-cause resolution.
• Maintain and enhance remediation runbooks, SOPs, and automation patterns for speed and scalability.
• Track key performance metrics: SLA compliance, backlog aging, exception handling.
• Contribute to continuous improvement by reducing false positives and streamlining vulnerability lifecycle processes.
• Note: Detailed project information will be shared during the recruitment process.

Our requirements

• Strong, hands-on CI/CD expertise with Jenkins, GitHub workflows, and pipeline troubleshooting.
• Scripting proficiency in Python, Bash, PowerShell, and/or Groovy.
• Practical experience in automation development to improve remediation processes.
• Ability to work collaboratively across international teams, managing time zones effectively.
• Fluent English (written and spoken), clear communicator with problem-solving focus.

Optional

• Previous experience in infrastructure, security engineering, or vulnerability management roles.
• Familiarity with containers, cloud platforms, and DevSecOps practices.
• Interest or experience in AI-assisted security—integrating LLMs (OpenAI, Anthropic, etc.) for remediation workflows.
• Self-driven, positive mindset, and aptitude for exploring emerging technologies.

What we offer

• Flexible cooperation model
• Hybrid work setup – 6 days per month from the office
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Ready to take the next step?

Submit your application! We look forward to reviewing your profile 😊

Know someone who might be a great fit?

Feel free to share this opportunity using the referral link: Mindbox Referrals System

Mindbox Sp. z o.o.

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.