The Cybersecurity Remediation Engineer joins the CISO Remediation Team within the Cyber Defense organization to drive technical resolution of security risks across the enterprise. This role operates at the intersection of engineering, infrastructure operations, and security architecture, focusing on implementing durable, scalable security improvements rather than just identifying issues. You will perform hands-on remediation by identifying root causes, hardening configurations, deploying security controls, and supporting incident recovery. Key responsibilities include creating technical documentation and developing automation to accelerate vulnerability reduction. Required skills include experience with operating systems, networks, cloud platforms, and identity systems. You will utilize tools such as Python, Ansible, Terraform, and various security infrastructure technologies. The role solves complex technical problems by implementing secure configurations across diverse environments including IBM Cloud, AWS, Azure, and GCP.
Identify root causes and implement technical fixes for security vulnerabilities and infrastructure risks.
Execute containment, recovery, and post-incident corrective actions to reduce enterprise risk.
Deploy security controls and harden configurations across operating systems, cloud platforms, and networks.
Partner with engineering teams to implement remediation plans and improve overall security posture.
Develop and implement automation tools and scripts to accelerate remediation and configuration management at scale.
Create technical documentation outlining remediation guidance and security best practices for stakeholders.
Validate risk reduction outcomes following the deployment of technical security improvements.
What we're looking for
4-8 years of experience in infrastructure, systems, cloud, network, platform, SRE, or security engineering roles with direct responsibility for production environments.
Experience troubleshooting, administering, and securing production technology environments through hardening, patch management, access control, and network segmentation.
Knowledge of vulnerability management and remediation techniques across infrastructure, cloud, identity, and application environments.
Ability to communicate technical remediation steps to non-technical stakeholders and collaborate across engineering and business teams.
Ability to leverage automation and AI-assisted tooling to improve remediation effectiveness and operational efficiency.
Experience with cloud platforms, CI/CD pipelines, containerization, and Kubernetes (preferred).
Foundational understanding of cybersecurity frameworks and regulations such as NIST CSF, NIST 800-series, ISO 27001, or PCI (preferred).
Active Directory
Entra ID
Python
Ansible
Terraform
IBM Cloud
AWS
Azure
GCP
Linux
Windows
Kubernetes
CI/CD
SDN
Privileged Access Management
Vulnerability Management
NIST CSF
ISO 27001
PCI
Active Directory
Entra ID
Python
Ansible
Terraform
IBM Cloud
AWS
Azure
GCP
Linux
Windows
Kubernetes
CI/CD
SDN
Privileged Access Management
Vulnerability Management
NIST CSF
ISO 27001
PCI
Containerization
Python
Ansible
Terraform
IBM Cloud
AWS
Azure
GCP
Kubernetes
Linux
Windows
EDR
NGFW
IDS
SIEM
SOAR
CI/CD
SDN
Threat Modeling
OWASP Top 10
MITRE ATT&CK
NIST CSF
ISO 27001
Microsoft Active Directory
Entra ID
Azure AD
Python
Ansible
Terraform
IBM Cloud
AWS
GCP
Kubernetes
Linux
Windows
EDR
NGFW
IDS
SIEM
SOAR
CI/CD
DNS
Kerberos