Vulnerability Management & Remediation Specialist

Softthink Solutions

. Identify, assess, prioritize, and coordinate remediation of critical cybersecurity vulnerabilities across enterprise IT systems and cloud environments .

Posted 11/4/2026full-timeRemote • United StatesSeniorLead💰 $40 - $50 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, including the identification, assessment, and remediation of cybersecurity vulnerabilities across diverse IT systems and cloud environments. Proficient in coordinating remediation efforts and ensuring compliance with federal cybersecurity standards.

Highest-signal resume keywords

Cybersecurity Vulnerability ManagementTenable NessusQualysRapid7NIST Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentPatch CoordinationRisk-Based Vulnerability PrioritizationSecurity Configuration HardeningCompensating Security ControlsFollow-Up Vulnerability ScansRemediation Effectiveness ValidationIncident Response CoordinationTechnical Documentation PreparationRemediation Tracking

Soft Skills

CollaborationProblem-SolvingCommunicationEscalation ManagementTime Management

Tools & Technologies

CISA KEV CatalogCVEsCVSS ScoringAWSMicrosoft AzureMicrosoft DefenderCrowdStrikeSplunkMicrosoft SentinelMicrosoft Intune

Certifications & Qualifications

CompTIA Security+CompTIA CySA+GSECCISSP

Industry Keywords

FISMAFedRAMPRMFCIS BenchmarksDISA STIGs

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityLinuxSplunk

About the role

Key responsibilities & impact

Identify, assess, prioritize, and coordinate remediation of critical cybersecurity vulnerabilities across enterprise IT systems and cloud environments
Monitor the CISA Known Exploited Vulnerabilities Catalog and evaluate newly identified vulnerabilities
Analyze vulnerability scan results, affected assets, exposure levels, exploitability, and system dependencies
Develop remediation plans covering patch deployment, configuration changes, compensating controls, and risk mitigation
Coordinate remediation with cybersecurity teams, system administrators, network engineers, cloud service providers, and managed service providers
Support accelerated remediation of critical and actively exploited vulnerabilities
Validate remediation through rescanning, patch verification, configuration assessments, and compensating control testing
Operate and analyze Tenable Nessus, Qualys, and Rapid7
Track remediation progress, findings, dependencies, exceptions, and residual risks
Identify blockers, escalate critical issues, and recommend alternative mitigation strategies
Support security change management and approved configuration changes
Collaborate with incident response and digital forensic teams while preserving evidence and supporting investigations
Prepare vulnerability assessment reports, remediation updates, risk summaries, executive dashboards, and technical closeout documentation
Maintain vulnerability tracking records and evidence for audits, assessments, and compliance reporting
Support federal cybersecurity compliance activities aligned with NIST, FISMA, RMF, and applicable security policies

Requirements

What you’ll need

US citizenship and work authorization
8+ years of professional experience in cybersecurity, vulnerability management, security engineering, or related IT security disciplines
Hands-on experience managing enterprise vulnerability assessments, patch coordination, and remediation tracking
Strong understanding of the CISA KEV Catalog, CVEs, CVSS scoring, and risk-based vulnerability prioritization
Experience with Tenable Nessus, Qualys, or Rapid7
Experience supporting remediation across Windows, Linux, network infrastructure, and cloud environments
Working knowledge of enterprise patch management, security configuration hardening, and compensating security controls
Familiarity with NIST SP 800-53, NIST SP 800-40, and federal vulnerability management practices
Experience conducting follow-up vulnerability scans and validating remediation effectiveness
Ability to coordinate technical remediation across multiple infrastructure and security teams
Ability to manage urgent remediation activities and meet aggressive deadlines
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent professional experience
Must have related certification and Bachelor's degree or equivalent professional experience
Preferred certifications include CompTIA Security+, CompTIA CySA+, GSEC, CISSP, or other relevant cybersecurity certifications
Preferred experience with federal government cybersecurity programs or regulated enterprise environments
Preferred familiarity with FISMA, FedRAMP, RMF, CIS Benchmarks, DISA STIGs, AWS, Microsoft Azure, Microsoft Defender, CrowdStrike, Splunk, Microsoft Sentinel, Microsoft Intune, Microsoft Configuration Manager, incident response, forensic evidence preservation, POA&M tracking, and cybersecurity risk reporting

Benefits

Comp & perks

Cutting-edge technology, training, and career guidance
Opportunities to work with leading multinational clients
Established methodologies, processes, and mentoring
Opportunities to work with advanced IT solutions and specialized services
Continuous learning and professional development
Engagements across a variety of specializations and projects