Cloud Vulnerability Remediation Engineer

• Review and analyze vulnerability findings affecting cloud -hosted resources identified through approved scanning and security tools.
  
• Assess vulnerability applicability and risk impact across cloud infrastructure, platform services, and supporting components.
  
• Plan and execute remediation actions, including patching, configuration changes, and security hardening, in accordance with established remediation timelines.
  
• Validate remediation results and confirm successful closure of assigned vulnerability tasks.
  
• Perform cloud -based patching and update activities for supported workloads using approved processes.
  
• Implement cloud security configuration changes to reduce exposure when vendor patches are unavailable.
  
• Create, update, and maintain remediation tasks and change records in the system of record to support audit and compliance requirements.
  
• Ensure remediation activities comply with established change management, approval, and validation processes.
  
• Provide remediation status updates and evidence for security reporting, audits, and leadership reviews.
  
• Partner with Security, Cloud Architecture, and Application teams to resolve complex or cross -platform vulnerabilities.
  

Requirements

• 3 years of professional IT experience, with hands -on exposure to cloud infrastructure, system administration, or vulnerability remediation.
  
• 3 years of experience supporting cloud -hosted systems in at least one enterprise cloud environment.
  
• 3 years of experience with vulnerability remediation concepts, including patching, configuration hardening, and compensating controls.
  
• 3 years of experience with IT service management and change processes.
  
• 3 years of experience demonstrating strong analytical and documentation skills.
  
• 3 years of experience following defined security and remediation procedures.
  
• 3 years of experience applying effective communication and collaboration skills.
  

• 1 year of exposure to enterprise vulnerability management processes and remediation SLAs.
  
• 1 year of knowledge of cloud security posture management, security baselines, or risk reporting.
  
• 1 year of experience holding relevant cloud or security certifications.
  

• Candidates must currently reside within 50 miles of the Austin, Texas work location. Out -of -state candidates or those planning to relocate will not be considered
  
• Total estimated hours per candidate shall not exceed 2,080 hours.
  
• Option to renew for two additional one -year periods at TxDOT's sole discretion.
  
• Services are anticipated to begin 07/15/2026 and conclude 07/14/2027.