Vulnerability Management & Remediation Specialist
New
J
JobgetherCybersecurity
Based in the United StatesFull-TimeMiddle
Salary40 - 50 USD per hour
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 8 years of professional experience in cybersecurity, vulnerability management, security engineering, or a related IT security discipline.
- Required Skills
- Linux
Requirements
- At least 8 years of professional experience in cybersecurity, vulnerability management, security engineering, or a related IT security discipline.
- Experience managing enterprise vulnerability assessments, patch coordination, and remediation tracking.
- Strong understanding of the CISA KEV Catalog, CVEs, CVSS, and risk-based vulnerability prioritization.
- Hands-on experience with Tenable Nessus, Qualys, or Rapid7 vulnerability scanning tools.
- Experience coordinating remediation across Windows, Linux, network infrastructure, and cloud environments.
- Working knowledge of enterprise patch management, security configuration hardening, and compensating security controls.
- Familiarity with NIST SP 800-53, NIST SP 800-40, and federal vulnerability management practices.
- Experience conducting follow-up vulnerability scans and validating remediation effectiveness.
- Ability to coordinate technical remediation across infrastructure and cybersecurity teams and meet strict operational deadlines.
- U.S. citizenship is required.
- Preferred: Experience supporting federal cybersecurity programs or regulated enterprise environments; familiarity with FISMA, FedRAMP, and RMF.
- Preferred: Experience with AWS or Microsoft Azure security hardening, CIS Benchmarks, DISA STIGs, and secure configuration standards.
- Preferred: Familiarity with Microsoft Defender, CrowdStrike, Splunk, Microsoft Sentinel, Microsoft Intune, or Microsoft Configuration Manager.
- Preferred: Bachelor's degree in a related field or equivalent professional experience, and relevant cybersecurity certifications such as Security+, CySA+, GSEC, or CISSP.
Responsibilities
- Identify, assess, prioritize, and coordinate remediation of vulnerabilities across enterprise IT systems and cloud environments.
- Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and assess newly disclosed vulnerabilities for organizational impact.
- Analyze vulnerability scan results, affected assets, exposure, exploitability, and system dependencies.
- Develop remediation plans for patch deployment, configuration changes, compensating controls, and other risk mitigation.
- Coordinate remediation with cybersecurity teams, system administrators, network engineers, cloud providers, and managed service providers.
- Validate remediation through follow-up scans, patch verification, configuration assessments, and compensating control testing.
- Operate and analyze Tenable Nessus, Qualys, and Rapid7 vulnerability scanning platforms.
- Track remediation progress, findings, dependencies, exceptions, and residual risks; escalate blockers and recommend alternative mitigations.
- Prepare vulnerability reports, risk summaries, executive dashboards, and technical closeout documentation.
- Maintain vulnerability records and evidence for audits, assessments, and compliance reporting; support NIST, FISMA, and RMF initiatives.
View Full Description & ApplyYou'll be redirected to the employer's site
