Vulnerability Management & Remediation Specialist

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vulnerability Management & Remediation Specialist based in the United States.

The Vulnerability Management & Remediation Specialist will play a key role in strengthening enterprise cybersecurity by identifying, prioritizing, and coordinating the resolution of critical security vulnerabilities.

This position focuses on vulnerability assessments, patch management, security configuration, and risk reduction across Windows, Linux, network, and cloud environments.

You will analyze vulnerability findings, assess potential threats, and develop practical remediation strategies aligned with organizational security priorities.

Working closely with cybersecurity engineers, infrastructure teams, system administrators, and external providers, you will help ensure vulnerabilities are addressed within required deadlines.

The role also involves validating remediation efforts, maintaining accurate risk documentation, and supporting federal cybersecurity compliance requirements.

You will contribute to protecting mission-critical systems while minimizing operational disruption and improving the organization's overall security posture.

This is a fully remote opportunity for U.S. citizens with extensive cybersecurity experience and a strong background in vulnerability management.

Accountabilities

The Vulnerability Management & Remediation Specialist is responsible for coordinating enterprise vulnerability management activities, driving remediation efforts, and ensuring that security risks are properly assessed, documented, and addressed.

• Identify, assess, prioritize, and coordinate the remediation of critical cybersecurity vulnerabilities across enterprise IT systems and cloud environments.
• Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and evaluate newly disclosed vulnerabilities for potential organizational impact.
• Analyze vulnerability scan results, affected assets, exposure levels, exploitability, and dependencies involving mission-critical systems.
• Develop actionable remediation plans covering patch deployment, configuration changes, compensating controls, and other risk mitigation strategies.
• Coordinate remediation activities with cybersecurity teams, system administrators, network engineers, cloud service providers, and managed service providers.
• Support accelerated remediation of critical and actively exploited vulnerabilities within established security deadlines.
• Validate remediation effectiveness through follow-up vulnerability scans, patch verification, configuration assessments, and compensating control testing.
• Operate and analyze vulnerability scanning platforms such as Tenable Nessus, Qualys, and Rapid7.
• Track remediation progress, outstanding findings, technical dependencies, approved exceptions, and residual security risks.
• Identify remediation blockers, escalate critical issues, and recommend alternative mitigation approaches when immediate patching is not possible.
• Support security change management processes and coordinate approved system configuration changes.
• Collaborate with incident response and digital forensics teams to ensure remediation activities preserve relevant evidence and account for ongoing investigations.
• Prepare vulnerability assessment reports, remediation updates, risk summaries, executive dashboards, and technical closeout documentation.
• Maintain accurate vulnerability records and supporting evidence for audits, security assessments, and compliance reporting.
• Support cybersecurity compliance initiatives aligned with NIST, FISMA, Risk Management Framework (RMF), and applicable federal security policies.

Requirements

The ideal candidate brings extensive hands-on cybersecurity experience, strong technical knowledge of enterprise vulnerability management, and the ability to coordinate remediation across complex IT environments. They should be analytical, detail-oriented, and comfortable managing urgent security priorities.

• At least 8 years of professional experience in cybersecurity, vulnerability management, security engineering, or a related IT security discipline.
• Demonstrated experience managing enterprise vulnerability assessments, patch coordination, and remediation tracking.
• Strong understanding of the CISA KEV Catalog, Common Vulnerabilities and Exposures (CVEs), Common Vulnerability Scoring System (CVSS), and risk-based vulnerability prioritization.
• Hands-on experience with vulnerability scanning tools such as Tenable Nessus, Qualys, or Rapid7.
• Experience coordinating vulnerability remediation across Windows, Linux, network infrastructure, and cloud environments.
• Working knowledge of enterprise patch management, security configuration hardening, and compensating security controls.
• Familiarity with NIST SP 800-53, NIST SP 800-40, and federal vulnerability management practices.
• Experience conducting follow-up vulnerability scans and validating remediation effectiveness.
• Ability to coordinate technical remediation activities across multiple infrastructure and cybersecurity teams.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Excellent stakeholder coordination and problem-solving abilities.
• Ability to manage urgent security remediation activities, prioritize competing demands, and meet strict operational deadlines.
• U.S. citizenship is required.

Preferred Qualifications

• Experience supporting federal government cybersecurity programs or regulated enterprise environments.
• Familiarity with FISMA, FedRAMP, RMF, and federal security authorization requirements.
• Experience with vulnerability remediation and security hardening in AWS and Microsoft Azure environments.
• Knowledge of CIS Benchmarks, DISA Security Technical Implementation Guides (STIGs), and secure configuration standards.
• Familiarity with Microsoft Defender, CrowdStrike, Splunk, or Microsoft Sentinel.
• Experience with enterprise patch management tools such as Microsoft Intune, Microsoft Configuration Manager, or automated configuration management solutions.
• Understanding of incident response, forensic evidence preservation, and security event investigations.
• Experience supporting Plan of Action and Milestones (POA&M) tracking and cybersecurity risk reporting.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Relevant professional certifications, including one or more of the following:
• CompTIA Security+
• CompTIA Cybersecurity Analyst (CySA+)
• GIAC Security Essentials (GSEC)
• Certified Information Systems Security Professional (CISSP)
• Other relevant vulnerability management or cybersecurity certifications.

Benefits

• Hourly compensation ranging from $40 to $50.
• Fully remote work arrangement within the United States.
• Opportunities to work with leading multinational clients on enterprise cybersecurity initiatives.
• Exposure to advanced IT solutions, security technologies, and specialized technical projects.
• Access to professional training, mentoring, and career development opportunities.
• Opportunities to expand technical expertise through continuous learning and exposure to emerging technologies.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1