Lead Infrastructure Security Consultant

Analyze security vulnerabilities, misconfigurations, and control gaps across servers, virtualization, containers, Kubernetes, and operating systems. Validate exploitability, identify attack paths, prioritize risks by business impact, and partner with platform engineering teams to develop and verify durable remediation.

Responsibilities

• Analyze vulnerabilities, misconfigurations, and control gaps to develop exposure hypotheses.
• Correlate technical findings to identify attack paths and high-impact exposure conditions.
• Prioritize remediation based on exploitability, blast radius, and business impact.
• Provide infrastructure security expertise across Windows and Linux servers, hypervisors, containers, and Kubernetes.
• Identify insecure baselines, patching gaps, insecure container images, cluster misconfigurations, weak host segmentation, and privilege pathways.
• Partner with platform teams to validate remediation and durable hardening outcomes.

Required Skills

• Windows and Linux server security
• Operating system hardening
• Vulnerability and exposure analysis
• Virtualization
• Docker
• Kubernetes
• Container security
• Security telemetry interpretation
• Attack path analysis
• Risk prioritization