Senior Vice President, Infrastructure Solution Engineer
BNY Mellon6 days ago
Responsibilities
- Monitor the VMAD vulnerability intelligence system for newly disclosed CVEs and policy violations.
- Design and operate automated remediation pipelines for application dependencies, host patching, and Kubernetes cluster upgrades.
- Integrate automated testing, release certification, change controls, approvals, and multi-environment deployments into remediation workflows.
- Identify and eliminate bottlenecks involving approval gates, flaky tests, and environment provisioning.
- Provide automation tooling and advisory support to application teams handling complex or high-risk vulnerability remediation.
- Manage Kubernetes cluster lifecycles, node pool upgrades, and workload disruption budgets.
Requirements
- At least 5 years of experience in platform, DevSecOps, or infrastructure engineering with ownership of security remediation programs at scale.
- Hands-on experience building and operating CI/CD pipelines using GitLab CI, Jenkins, GitHub Actions, or equivalent.
- Working proficiency in at least two of Java/JVM, Go, and Python, particularly for dependency management, build tooling, and vulnerability scanning.
- Experience with Kubernetes operations, including cluster lifecycle management, node pool upgrades, and workload disruption budgeting.
- Familiarity with OS-level patch management and host configuration management tools such as Ansible or Chef.
- Strong understanding of vulnerability lifecycles, including CVE scoring with CVSS and EPSS, exploit maturity, and risk-based prioritization.
Tech Stack