The Cybersecurity Remediation Engineer joins the CISO Remediation Team within the Cyber Defense organization to drive technical resolution of security risks across the enterprise. This role operates at the intersection of engineering, infrastructure operations, and security architecture, focusing on implementing durable, scalable security improvements rather than just identifying issues. You will perform hands-on remediation by identifying root causes, hardening configurations, deploying security controls, and creating technical documentation. Key responsibilities include supporting incident recovery and developing automation to accelerate vulnerability reduction. Required skills include experience with operating systems, networks, cloud platforms, and identity systems. You should possess expertise in areas such as Active Directory, Python, Ansible, Terraform, or container platforms like Kubernetes. The role solves complex technical problems by implementing secure configurations across diverse production technology environments.
Identify root causes and implement technical fixes for security vulnerabilities and infrastructure risks.
Execute containment, recovery, and post-incident corrective actions to reduce enterprise risk.
Deploy security controls and harden configurations across operating systems, cloud platforms, and networks.
Partner with engineering teams to implement remediation plans and improve overall security posture.
Develop automation and tooling to accelerate configuration management and vulnerability reduction at scale.
Create technical documentation outlining remediation guidance and security best practices.
Validate risk reduction outcomes following the deployment of technical security improvements.
What we're looking for
4-8 years of experience in infrastructure, systems, cloud, network, platform, SRE, or security engineering roles with direct responsibility for operating and securing production technology environments.
Experience troubleshooting, administering, and securing production technology environments, including system hardening, patch management, access control, and network segmentation.
Knowledge of vulnerability management and remediation techniques across infrastructure, cloud, identity, and/or application environments.
Strong interpersonal and communication skills to explain technical remediation steps to non-technical stakeholders.
Ability to leverage automation and AI-assisted tooling to improve remediation effectiveness and operational efficiency.
Experience with cloud platforms, CI/CD pipelines, containerization, and Kubernetes (preferred).
Familiarity with Agile development environments and cybersecurity frameworks like NIST or ISO 27001 (preferred).
Active Directory
Entra ID
Python
Ansible
Terraform
IBM Cloud
AWS
Azure
GCP
Linux
Windows
Kubernetes
CI/CD
SDN
Privileged Access Management
Vulnerability Management
NIST CSF
ISO 27001
PCI
Active Directory
Entra ID
Python
Ansible
Terraform
IBM Cloud
AWS
Azure
GCP
Kubernetes
Linux
Windows
SDN
CI/CD
Privileged Access Management
Vulnerability Management
NIST CSF
ISO 27001
PCI
SRE
DevOps
Python
Ansible
Terraform
IBM Cloud
AWS
Azure
GCP
Kubernetes
Linux
Windows
EDR
NGFW
IDS
SIEM
SOAR
CI/CD
SDN
Threat Modeling
OWASP Top 10
MITRE ATT&CK
NIST CSF
ISO 27001
Microsoft Active Directory
Entra ID
Azure AD
Python
Ansible
Terraform
IBM Cloud
AWS
GCP
Kubernetes
Linux
Windows
EDR
NGFW
IDS
SIEM
SOAR
CI/CD
DNS
Kerberos