Software Engineering Cybersecurity Remediation Specialist Professional Markham, CA

IBM

Markham

On-site

CAD 131,750 - 186,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

IBM is seeking a Cybersecurity Remediation Engineer to join the CISO Remediation Team. You will drive technical remediation across security incidents, vulnerabilities, and infrastructure, partnering with engineering and product teams to embed security into existing practices.

The role requires 4–8 years in security engineering, strong problem-solving, and the ability to communicate complex remediation steps to diverse stakeholders. Hybrid work in Canada is available.

Qualifications

Bachelor’s Degree required.
4–8 years in security engineering or related roles.
Experience with cloud, CI/CD, containers, and automation.
Ability to communicate remediation steps to technical and non-technical stakeholders.
Familiarity with security frameworks and risk-based remediation.

Responsibilities

Lead technical remediation across security incidents and vulnerabilities.
Collaborate with product, engineering, and infrastructure teams to embed security practices.
Conduct security reviews and translate findings into actionable guidance.
Develop and maintain remediation patterns and playbooks.
Create technical documentation outlining remediation steps and best practices.
Develop tools to support detection, prevention and incident analysis.

Skills

Problem solving

Communication skills

Independent work

Team collaboration

Security reviews

Vulnerability management

AI tooling awareness

Education

Bachelor's Degree

Tools

Python

Ansible

Terraform

Cloud platforms

Kubernetes

Job description

At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high-resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability. Our teams ensure the performance, security, and scalability that clients and industries depend on every day. Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You’ll work with diverse technologies and colleagues worldwide to deliver resilient, future-ready solutions that power innovation. With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.

Your role and responsibilities

The CISO Remediation Team is looking to add a cybersecurity Remediation Engineer as part of the overall Cyber Defense organization. In this role, you will contribute to and, over time, drive the technical resolution of security risk across the IBM enterprise, operating at the intersection of security operations, engineering, and architecture. You will help teams recover from incidents, remediate vulnerabilities, and implement durable, scalable security improvements.

Depending on the engagement and experience level, you may remediate issues directly, partner with engineering teams to drive fixes, or design repeatable remediation patterns. This role is not a primary SOC, detection, or application security pipeline ownership role, but partners closely with those teams to drive remediation outcomes.

The ideal candidate thrives in high‑pressure environments, thinks like both an attacker and defender, and communicates clearly with technical and non‑technical stakeholders.

This role spans multiple technical domains. Candidates are not expected to be experts in all areas; strong candidates demonstrate deep expertise in one or two domains and working knowledge of adjacent areas.

Areas of specialization may include:

Scripting, Automation & Infrastructure as Code: Python, Ansible, Terraform, or similar tooling
Cloud & Virtualized Environments: IBM Cloud, AWS, Azure, GCP; virtualization and container platforms
Operating Systems & Networking: Windows or Linux; network segmentation, SDN, and isolation techniques
Security Technologies: EDR, NGFW, IDS, SIEM, SOAR, and related platforms

Key Duties:

Support containment, recovery, and post-incident remediation by identifying root causes and implementing technical fixes that reduce recurrence.
Partner with product, engineering, and infrastructure teams to embed security within existing practices.
Conduct security and risk assessments of applications, platforms, and infrastructure, including threat modeling and targeted technical review.
Apply security principles to protect systems and data, ensuring availability, authentication, authorization, confidentiality, and integrity.
Create technical documentation outlining remediation guidance and security best practices.
Develop or implement tools to support detection, prevention and analysis of security threats.

Required education

Bachelor's Degree

Required technical and professional expertise

Ability to work independently or as part of a team while operating effectively in ambiguous, fast‑moving environments.
Strong problem‑solving skills with attention to detail and a proactive mindset.
Strong interpersonal and communication skills with the ability to work effectively across engineering, security, and business teams; and explain technical remediation steps to non-technical stakeholders.
Ability to collaborate effectively and, with experience, influence remediation outcomes across federated teams.
Experience conducting security reviews and translating findings into actionable engineering guidance.
Experience applying and maintaining secure configurations across systems, networks, or applications.
Ability to leverage AI tools to accelerate triage, remediation recommendations, and incident response, with appropriate human review and judgement.
Knowledge of vulnerability management, common attack patterns, and mitigation techniques. (e.g., OWASP Top 10, MITRE ATT&CK.)

Preferred technical and professional experience

~4-8 years of experience in security engineering or adjacent engineering roles. (e.g., networking, infrastructure, cloud, or application development.)
Experience with cloud platforms, CI/CD pipelines, containerization, and Kubernetes.
Experience using automation and AI to reduce mean time to remediation (MTTR).
Familiarity with Agile development environments.
Foundational understanding of cybersecurity frameworks and regulations and how they inform risk‑based remediation decisions. (e.g., NIST CSF, NIST 800-series, ISO 27001, PCI.)
Certifications are a plus but not required; hands‑on experience is valued most. (e.g., CISSP, CISM, OSCP, SANS, cloud security certifications.)

ABOUT BUSINESS UNIT

IBM Systems helps IT leaders think differently about their infrastructure. IBM servers and storage are no longer inanimate - they can understand, reason, and learn so our clients can innovate while avoiding IT issues. Our systems power the world’s most important industries and our clients are the architects of the future.Join us to help build our leading-edge technology portfoliodesigned for cognitive business and optimized for cloud computing.

YOUR LIFE @ IBM

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you’ll be able to learn and develop yourself and your career, you’ll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on‑going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can‑do attitude and always striving for an outcome focused approach within everything that they do.

Are you ready to be an IBMer?

ABOUT IBM

IBM’s greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we’re also one of the biggest technology and consulting employers, with many of the Fortune 500 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it’s time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.

IBM is proud to be an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

OTHER RELEVANT JOB DETAILS

Must have the ability to work in Canada without sponsorship. For additional information about location requirements, please discuss with the recruiter following submission of your application.

Job Title

Cybersecurity Remediation Engineer

Job ID

120520

City / Township / Village

Markham

State / Province

Country

Canada

Work arrangement

Hybrid

Area of work