Vulnerability Management & Remediation Specialist
Fully Remote - US
Vulnerability Management & Remediation Specialist
Full Time • Fully Remote - US
Vulnerability Management & Remediation Specialist
Work Authorization: US Citizen
Work Location: Remote
Work Authorization: US Citizen
Work Location: Remote
Position Overview
We are seeking an experienced Vulnerability Management & Remediation Specialist to support enterprise vulnerability assessments, critical security vulnerability remediation, patch management coordination, and cybersecurity risk reduction initiatives.
The ideal candidate will have hands-on experience identifying, prioritizing, tracking, and remediating critical vulnerabilities across Windows, Linux, network, and cloud environments.
This role requires expertise in CISA Known Exploited Vulnerabilities (KEVs), vulnerability scanning technologies, security configuration management, and federal cybersecurity compliance requirements.
The selected candidate will collaborate with security engineers, system administrators, infrastructure teams, and stakeholders to ensure timely remediation of critical vulnerabilities while minimizing operational disruption.
The ideal candidate will have hands-on experience identifying, prioritizing, tracking, and remediating critical vulnerabilities across Windows, Linux, network, and cloud environments.
This role requires expertise in CISA Known Exploited Vulnerabilities (KEVs), vulnerability scanning technologies, security configuration management, and federal cybersecurity compliance requirements.
The selected candidate will collaborate with security engineers, system administrators, infrastructure teams, and stakeholders to ensure timely remediation of critical vulnerabilities while minimizing operational disruption.
Key Responsibilities
- Identify, assess, prioritize, and coordinate remediation of critical cybersecurity vulnerabilities across enterprise IT systems and cloud environments.
- Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and evaluate newly identified vulnerabilities for potential organizational impact.
- Analyze vulnerability scan results, affected assets, exposure levels, exploitability, and mission-critical system dependencies.
- Develop actionable vulnerability remediation plans covering patch deployment, configuration changes, compensating controls, and risk mitigation strategies.
- Coordinate vulnerability remediation activities with cybersecurity teams, system administrators, network engineers, cloud service providers, and managed service providers.
- Support accelerated remediation of critical and actively exploited vulnerabilities within established security deadlines.
- Validate remediation effectiveness through vulnerability rescanning, patch verification, configuration assessments, and compensating control testing.
- Operate and analyze vulnerability scanning platforms such as Tenable Nessus, Qualys, and Rapid7.
- Track vulnerability remediation progress, outstanding findings, technical dependencies, approved exceptions, and residual security risks.
- Identify remediation blockers, escalate critical issues, and recommend alternative risk mitigation strategies when immediate patching is not feasible.
- Support security change management processes and coordinate approved system configuration changes.
- Collaborate with incident response and digital forensic teams to ensure remediation activities account for evidence preservation and ongoing investigations.
- Prepare vulnerability assessment reports, remediation status updates, risk summaries, executive dashboards, and technical closeout documentation.
- Maintain accurate vulnerability tracking records and supporting evidence for audits, security assessments, and compliance reporting.
- Support federal cybersecurity compliance activities aligned with NIST, FISMA, RMF, and applicable security policies.
Required Qualifications
- 8+ years of professional experience in cybersecurity, vulnerability management, security engineering, or related IT security disciplines.
- Demonstrated hands-on experience managing enterprise vulnerability assessments, patch coordination, and remediation tracking.
- Strong understanding of the CISA KEV Catalog, CVEs, CVSS scoring, and risk-based vulnerability prioritization.
- Experience with vulnerability scanning and assessment tools such as Tenable Nessus, Qualys, or Rapid7.
- Experience supporting vulnerability remediation across Windows, Linux, network infrastructure, and cloud environments.
- Working knowledge of enterprise patch management, security configuration hardening, and compensating security controls.
- Familiarity with NIST SP 800-53, NIST SP 800-40, and federal vulnerability management practices.
- Experience conducting follow-up vulnerability scans and validating remediation effectiveness.
- Ability to coordinate technical remediation activities across multiple infrastructure and security teams.
- Strong analytical, troubleshooting, documentation, communication, and stakeholder coordination skills.
- Ability to manage urgent security remediation activities and meet aggressive operational deadlines.
Preferred Qualifications
- Experience supporting federal government cybersecurity programs or regulated enterprise environments.
- Familiarity with FISMA, FedRAMP, RMF, and federal security authorization requirements.
- Experience with vulnerability remediation and security hardening in AWS and Microsoft Azure environments.
- Knowledge of CIS Benchmarks, DISA STIGs, and secure configuration standards.
- Experience using Microsoft Defender, CrowdStrike, Splunk, or Microsoft Sentinel.
- Experience with enterprise patch management tools such as Microsoft Intune, Microsoft Configuration Manager, or automated configuration management solutions.
- Understanding of incident response, forensic evidence preservation, and security event investigation.
- Experience supporting Plan of Action and Milestones (POA&M) tracking and cybersecurity risk reporting.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent professional experience.
Preferred Certifications (Any One or More):
- CompTIA Security+
- CompTIA Cybersecurity Analyst (CySA+)
- GIAC Security Essentials (GSEC)
- Certified Information Systems Security Professional (CISSP)
- Other relevant vulnerability management or cybersecurity certifications
This is a remote position.
Compensation: $40.00 - $50.00 per hour
Mission Statement
Softthink Solutions’ mission is to drive continuous innovation in IT services by prioritizing product development and implementing trustworthy computing practices. Our focus on secure and reliable product delivery is backed by sound business practices and a commitment to the long-term satisfaction of our clients in every project, regardless of its size or complexity.
Through our innovative solutions and dedicated team of experts, we strive to exceed our clients’ expectations and set the standard for excellence in the IT industry.
Vision Statement
At Softthink Solutions, our vision is to be a trusted partner for our clients, empowering them to bring their ideas to life in the most efficient and effective manner possible. We are committed to using established best practices, industry-standard processes, and cutting-edge technology to deliver top-notch solutions that exceed expectations.
Our goal is to be recognized as leaders in the industry for our innovative, reliable, and secure IT services and solutions, and to drive the success of our clients through every project we undertake.
Careers
STSI is an independent US-based Software services and consulting partner with a primary focus on long-term relationships with both clients and team members.
STSI offers team members cutting-edge technology, training, and career guidance to expand and grow their skill sets and bring maximum value to our clients.
STSI is constantly reviewing and expanding its people strength and strives to optimally match client needs to team member talents. We are a people-oriented company seeking the best and brightest to join our team. We work with a variety of employment statuses – from citizens to permanent residents to H1B and EAD immigrants. We have openings for entry level as well as senior positions across a variety of specializations with active in-house and client projects.
In an industry that’s constantly reinventing itself, STSI challenges its team members and consultants with engagements that involve specialized services and advanced IT solutions – applying agile development principles, methodical planning, creative thinking, and continuous learning. A dynamic environment keeps our team members ahead of the curve by providing:
In an industry that’s constantly reinventing itself, STSI challenges its team members and consultants with engagements that involve specialized services and advanced IT solutions – applying agile development principles, methodical planning, creative thinking, and continuous learning. A dynamic environment keeps our team members ahead of the curve by providing:
- Opportunities to work with leading multinational clients.
- A comprehensive portfolio of solutions that span leading-edge technologies from Enterprise Architecture to Business Intelligence to Quality Assurance
- Established methodologies, processes, and mentoring to maximize efficacy and efficiency.
- A growing R&D division continually exploring and pioneering the latest technological developments in a variety of disciplines.
(if you already have a resume on Indeed)