Security Remediation Engineer

Overview:

As a Security Remediation Engineer, you will execute and support Cyber Tier Risk Assessment services, including Microsoft 365 Automated Policy Benchmarking and Vulnerability and Remediation Management. You will own the technical remediation lifecycle for security findings originating from third-party security vendors, internal assessments, and the vulnerability management as a service (VMaaS) engine. This role requires strong hands-on expertise in identifying, testing, implementing, and validating security remediations across modern cloud and enterprise environments. You will articulate remediation outcomes, risks, and tradeoffs to both technical and non-technical stakeholders, ensuring transparency and accuracy throughout delivery. A successful candidate brings deep knowledge of how modern technologies are compromised and secured, and applies that knowledge to deliver reliable, repeatable security improvements.

ROLE AND RESPONSIBILITIES

• Remediate security vulnerabilities through comprehensive testing and risk forecasting to ensure timely and effective implementation of controls.
• Develop and document standardized processes and procedures for security remediation to ensure consistency and scalability.
• Track, manage, and report on remediation requests, providing clear visibility to clients regarding progress and outcomes from vendor-driven engagements.
• Act as the primary escalation point for Security Remediation Engineers, offering guidance and resolving complex technical issues.
• Lead client-facing calls and presentations to communicate remediation status, address concerns, and align with security objectives.
• Project manage specialized remediation initiatives and one-off projects originating from CTM team responsibilities.
• Analyze unresolved issues and negative outcomes, recommending process improvements and preventive measures. 
• Create and maintain detailed documentation for systems, processes, and remediation workflows.
• Own and drive resolution of pending issues, ensuring accountability and timely closure.
• Advise stakeholders and translate business requirements into secure, reliable technical solutions.
• Implement and manage email security measures to protect against phishing and other cyber threats. 
• Execute vulnerability remediation strategies to identify and mitigate security weaknesses across systems and networks.
• Apply and enforce security best practices and industry standards throughout remediation activities.
• Configure and manage cloud services, email security, and baseline hardening, ensuring adherence to standard configurations.

Experience

• 5 years of experience in Vulnerability Management
• Minimum 3–4 years of cybersecurity experience in a cloud services environment.
• Minimum 3–4 years of experience in a client-facing technology role.
• Minimum 3–4 years of experience in a systems engineering position.
• Experience in the financial sector is a plus.
• Experience working at an MSP is a plus. 
• Security and/or systems certifications are a plus 

Education & Certifications :

• Security and/or systems certifications are a plus
• Security+ (nice to have)
• Network+ (nice to have) 
• MS AZ-500, SC-100, SC-200 (nice to have) 

Knowledge & Skills 

• Ability to design and deliver tailored security technology solutions for clients, ensuring scalability and compliance with industry standards.
• Proven capability to perform under pressure and meet aggressive deadlines, while maintaining accuracy and security integrity.
• Highly analytical and logical thinker, skilled in advanced root cause analysis and problem resolution. 
• Flexibility to occasionally work nights and weekends, with strong prioritization and time management skills.
• Deep technical expertise in public cloud platforms, particularly Microsoft Office 365 and Azure, including advanced configuration and security hardening. • Advanced proficiency in Windows Server technologies, including Active Directory, Group Policy, and Identity Management (Entra/Okta).