Security Remediation

Security Remediation Cybersecurity Jobs

3 jobs found

Today

Information Security Analyst Senior

General Dynamics Information Technology Tyndall AFB, FL

Tyndall AFB, FL

Today

$77k - $101k/yr Full time Senior Information Security Information Systems Security

Apply Now

Job Description

The Senior Information Security Analyst will coordinate vulnerability scanning and identification across network hosts, strengthen vulnerability management practices, and support remediation and audit or examination efforts. The role works closely with Engineering and Operations teams, along with vendors, to help protect information and reduce the risk of unauthorized access.

Key Responsibilities

Manage system vulnerabilities in alignment with security requirements, applying NIST continuous monitoring standards and RMF critical security controls and countermeasures based on mission system risk assessments.
Identify and evaluate emergency or priority vulnerabilities, incorporating input from cyber intelligence, engineering, or operations, and propose targeted remediation approaches.
Analyze vulnerability data and assist with prioritization and remediation efforts in accordance with risk and vulnerability management standards.
Develop a deep understanding of vulnerabilities, including impacts and mitigation techniques, and clearly document and communicate findings to stakeholders.
Update and create security standards and templates to meet evolving regulatory, audit, and related requirements.
Improve the effectiveness and efficiency of enterprise vulnerability management practices across identification, assessment, and remediation.
Leverage and enhance existing vulnerability management frameworks, policies, and standards to support minimum industry best practices.
Coordinate data collection and documentation needed for examinations and audits.
Work with existing security solution vendors (for example, ACAS and HBSS) to identify potential solution approaches.
Research, develop, implement, test, and review information security measures to protect information and prevent unauthorized access.
Gather information necessary to maintain security and support external barrier capabilities such as firewalls and other security controls.
Support ISSO activities by assessing and reviewing systems to identify weaknesses, recommending improvements to address vulnerabilities, implementing changes, and documenting upgrades.

Required Qualifications

BA/BS and 3+ years of experience; additional years may be considered in lieu of degree (7+ years).
Experience and training with Microsoft Server 2016/2019 or newer, including Active Directory, Radius, DNS, and Group Policy.
Experience and training with virtual environments (such as VMware and Hyper-V).
Familiarity with maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans.
Familiarity with maintaining and operating SQL Server.
Experience applying patches/updates and STIGs.
Ability to possess and maintain a minimum IAT level II certification IAW the DoW directive 8140.01 (sec+, CCSP, CASP+).
Secret clearance.
On customer site.

Technologies and Tools

NIST continuous monitoring standards
RMF
ACAS, HBSS
Microsoft Server 2016, Microsoft Server 2019
Active Directory, Radius, DNS, Group Policy
VMware, Hyper-V
Trellix ENS (formerly McAfee Endpoint Security)
Tenable Security Center (ACAS)
SQL Server
STIGs
Firewalls and other security measures

Benefits

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from
Paid vacation and holidays to help rest and recharge

Required Clearance and Work Details

Clearance level: Secret
Public trust: None
Requisition type: Regular
Location: Tyndall AFB, Florida (Onsite Workplace)
Travel required: Less than 10%
Citizenship: U.S. Citizenship Required

Identity Verification Process

You are expected to be on camera during virtual interviews.
The employer may take your picture to verify your identity and prevent fraud.
Proceeding authorizes the collection, processing, and use of biometric data for identity verification and security purposes.

View full job page →

1mo ago

Cybersecurity Analyst

GM Financial Irving, TX

Irving, TX

1mo ago Closed

Full time Cybersecurity Tools Identity and Access Management Information Security

This position is no longer accepting applications (closed Sep 23, 2026).

Job Description

GM Financial offers a hybrid work environment in Irving, TX, with a generous benefits package available on day one. You will have access to 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay, and nine company holidays. The team shapes a culture built on innovative ideas, integrity, and community and belonging. Compensation includes competitive pay with bonus eligibility.

Responsibilities

In this role, you coordinate the Cybersecurity Issues Management process and manage issues through the remediation lifecycle. That includes intake, assignment, remediation validation, and closure, with a focus on keeping remediation on track.

Manage cybersecurity issues throughout the remediation lifecycle, from intake and assignment through remediation validation and closure.
Partner with issue owners and technical stakeholders to document remediation plans, target dates, key milestones, and progress toward remediation objectives.
Perform ongoing follow-up to monitor remediation efforts, identify obstacles, drive accountability, and escalate risks, delays, and aging issues as appropriate.
Research and interpret technical issues across network, Active Directory, web application, cloud, and infrastructure security domains to communicate risk and remediation plans to both technical and non-technical stakeholders.
Coordinate regularly with Offensive Security and other Cybersecurity teams on finding status and validation requirements.
Maintain accurate documentation, remediation records, status updates, and supporting evidence in designated workflow and tracking systems.
Develop and deliver reporting and metrics to provide leadership visibility into remediation progress, issue aging, trends, and overall cybersecurity risk posture.
Identify opportunities to improve issue management processes, reporting capabilities, and governance practices to increase efficiency, consistency, and stakeholder experience.

Requirements

At least 1 year of experience in remediation management, issues management, vulnerability management, or a closely related role with direct exposure to tracking and remediating cybersecurity findings.
Working familiarity with common security and reconnaissance tooling to interpret and validate output, plus basic scripting ability (PowerShell or Bash preferred).
Foundational understanding of cybersecurity principles, vulnerabilities, threats, and security controls.
Ability to analyze information, identify trends, and evaluate potential business and risk impacts.
Strong organizational skills to manage competing priorities and deadlines in a fast-paced environment.
Effective written and verbal communication skills, including tailoring messages for technical and non-technical audiences.
Ability to build collaborative relationships across cybersecurity, technology, and business teams.
Knowledge of cybersecurity frameworks and industry standards such as NIST Cybersecurity Framework (CSF), NIST 800-53, ISO 27001, or similar frameworks.
Understanding of common technology domains including networking, infrastructure, cloud, identity and access management, and application security.
Strong analytical, problem-solving, and critical thinking skills.
Experience interpreting technical documentation, issues, vulnerabilities, and remediation evidence.
Experience with issue tracking, workflow management, reporting, or cybersecurity platforms is preferred.
Demonstrated ability to independently investigate technical findings using open-source research to proactively close gaps in technical understanding.
High School Diploma or equivalent.

Technologies

PowerShell, Bash, SSH, serial connections, TMSH
Active Directory, web application, cloud
NIST Cybersecurity Framework (CSF), NIST 800-53, ISO 27001
Visio, Microsoft Office products, UML Design Tools

Licenses and Certifications

Information Security Certifications are strongly preferred.

View full job page →

1mo ago

Application Security Vulnerability Risk Lead

AT&T Charlotte, NC

Charlotte, NC

1mo ago Closed

$141k - $237k/yr Full time Ai Security Application Security Information Security

This position is no longer accepting applications (closed Sep 14, 2026).

Job Description

AT&T is seeking an Application Security Vulnerability Risk Lead based onsite in the Charlotte, NC area to guide technology risk management across Vulnerability Management and Application Security. In this individual contributor role with no direct reports, you will oversee the end-to-end risk management lifecycle, with a focus on both application security and infrastructure vulnerability management, partnering across teams to ensure issues are addressed and remediation is executed effectively.

This position supports the Technology Risk Management program through strategic guidance, control and risk evaluation, and close collaboration with stakeholders across technology, business, and risk partners. You will also contribute to Tech Risk activities such as risk monitoring, periodic controls testing, evidence collection, and audit readiness.

What you’ll do

Identify, assess, and document controls and risks across Vulnerability Management and Application Security activities, keeping a proactive stance toward emerging threats and vulnerabilities.
Continuously evaluate emerging AI security threats and recommend mitigations and enhancements to existing controls.
Drive Issues Management and Remediation efforts aligned to the Technology Risk Management program.
Partner with and advise key stakeholders across technology, business, and risk partners to identify, assess, respond to, and monitor risks that help keep AT&T and its customers safe and resilient.
Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, and audit readiness efforts.

What you bring

Preferred Bachelor’s degree in Information Systems, Engineering, Cyber Security, or a related field.
5+ years of work experience in technology, operational risk management, or a related discipline at a global company.
Significant (5-7 years) experience across multiple industry risk, control, and governance disciplines such as Audit, Information Security, or Regulatory Compliance.
Proven experience in vulnerability management and application security, including identifying, assessing, prioritizing, and remediating vulnerabilities in complex environments.
Strong understanding of AI-specific threats (including adversarial attacks, model theft, and data poisoning) and practical experience mitigating these risks in enterprise environments.
Strong information security risk and cybersecurity control knowledge, including familiarity with information and technology risk management policies, methods, standards, tools, and processes such as ISO, COSO, COBIT, and NIST, plus experience with compliance, legal, and internal or external audit and regulatory requirements.
Experience identifying, tracking, monitoring, and remediating critical non-compliance issues through the issue management lifecycle.
Strong client relationship management experience, including communication and influencing skills.
Strong interpersonal and oral and written communication skills, with the ability to build relationships at all levels.

Tools and focus areas

AI-specific threats
ISO
COSO
COBIT
NIST

Location and schedule

Onsite: Charlotte, NC
Also listed: Charlotte, North Carolina, Dallas, Texas
Weekly hours: 40
Time type: Regular

Compensation

Salary range: USD 141,300 - 237,400 per year.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories
AT&T internet (and fiber where available) and AT&T phone

View full job page →

Security Remediation Cybersecurity Jobs

Information Security Analyst Senior

Cybersecurity Analyst

Application Security Vulnerability Risk Lead

Get Security Remediation Cybersecurity Jobs alerts