Vulnerability Management & Remediation Specialist

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $40 - $50 / hour

⏰ Full Time

🟠 Senior

🔴 Lead

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Softthink Solutions

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2003

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Softthink Solutions is an emerging innovative IT services partner that provides end-to-end project solutions and premium class services. The company specializes in several areas including enterprise application development, cloud services, ERP, business analytics, testing & QA, artificial intelligence, DevOps, and IT infrastructure management. Softthink is recognized as a certified small business in various categories, including 8(a), HUBZone, and WOSB, and has established strategic partnerships with major companies like Amazon Web Services, Microsoft Azure, and Google Cloud. Their commitment to quality is demonstrated through various ISO certifications and their focus on delivering cloud modernization, cybersecurity, and analytics solutions.

📋 Description

• Identify, assess, prioritize, and coordinate remediation of critical cybersecurity vulnerabilities across enterprise IT systems and cloud environments • Monitor the CISA Known Exploited Vulnerabilities Catalog and evaluate newly identified vulnerabilities • Analyze vulnerability scan results, affected assets, exposure levels, exploitability, and system dependencies • Develop remediation plans covering patch deployment, configuration changes, compensating controls, and risk mitigation • Coordinate remediation with cybersecurity teams, system administrators, network engineers, cloud service providers, and managed service providers • Support accelerated remediation of critical and actively exploited vulnerabilities • Validate remediation through rescanning, patch verification, configuration assessments, and compensating control testing • Operate and analyze Tenable Nessus, Qualys, and Rapid7 • Track remediation progress, findings, dependencies, exceptions, and residual risks • Identify blockers, escalate critical issues, and recommend alternative mitigation strategies • Support security change management and approved configuration changes • Collaborate with incident response and digital forensic teams while preserving evidence and supporting investigations • Prepare vulnerability assessment reports, remediation updates, risk summaries, executive dashboards, and technical closeout documentation • Maintain vulnerability tracking records and evidence for audits, assessments, and compliance reporting • Support federal cybersecurity compliance activities aligned with NIST, FISMA, RMF, and applicable security policies

🎯 Requirements

• US citizenship and work authorization • 8+ years of professional experience in cybersecurity, vulnerability management, security engineering, or related IT security disciplines • Hands-on experience managing enterprise vulnerability assessments, patch coordination, and remediation tracking • Strong understanding of the CISA KEV Catalog, CVEs, CVSS scoring, and risk-based vulnerability prioritization • Experience with Tenable Nessus, Qualys, or Rapid7 • Experience supporting remediation across Windows, Linux, network infrastructure, and cloud environments • Working knowledge of enterprise patch management, security configuration hardening, and compensating security controls • Familiarity with NIST SP 800-53, NIST SP 800-40, and federal vulnerability management practices • Experience conducting follow-up vulnerability scans and validating remediation effectiveness • Ability to coordinate technical remediation across multiple infrastructure and security teams • Ability to manage urgent remediation activities and meet aggressive deadlines • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent professional experience • Must have related certification and Bachelor's degree or equivalent professional experience • Preferred certifications include CompTIA Security+, CompTIA CySA+, GSEC, CISSP, or other relevant cybersecurity certifications • Preferred experience with federal government cybersecurity programs or regulated enterprise environments • Preferred familiarity with FISMA, FedRAMP, RMF, CIS Benchmarks, DISA STIGs, AWS, Microsoft Azure, Microsoft Defender, CrowdStrike, Splunk, Microsoft Sentinel, Microsoft Intune, Microsoft Configuration Manager, incident response, forensic evidence preservation, POA&M tracking, and cybersecurity risk reporting

🏖️ Benefits

• Cutting-edge technology, training, and career guidance • Opportunities to work with leading multinational clients • Established methodologies, processes, and mentoring • Opportunities to work with advanced IT solutions and specialized services • Continuous learning and professional development • Engagements across a variety of specializations and projects

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume