Cybersecurity Remediation Engineer — Incident Recovery

International Business Machines Corporation; Atlanta (GA); On-site; USD 110,000 - 170,000; Full time

Job summary

IBM Infrastructure & Technology is seeking a cybersecurity Remediation Engineer to join the CISO Remediation Team. You will help resolve security risks across the enterprise, working at the intersection of security operations, engineering, and architecture to remediate vulnerabilities and implement durable security improvements.

As a candidate, you thrive under pressure, think like attacker and defender, and communicate clearly with technical and non-technical stakeholders.

Qualifications

• Ability to work independently or in fast-moving environments.
• Strong problem-solving skills with attention to detail.
• Strong communication across engineering, security, and business teams.
• Experience conducting security reviews and providing actionable guidance.
• Knowledge of vulnerability management and common attack patterns (e.g., OWASP, MITRE ATT&CK).

Responsibilities

• Support containment, recovery, and post-incident remediation by identifying root causes.
• Partner with product, engineering, and infrastructure teams to embed security.
• Conduct security and risk assessments of applications, platforms, and infrastructure, including threat modeling.
• Apply security principles to protect systems and data, ensuring availability, authentication, authorization, confidentiality, and integrity.
• Create technical documentation outlining remediation guidance and security best practices.
• Develop or implement tools to support detection, prevention and analysis of security threats.

Skills

Security engineering

Incident response

Vulnerability management

Cloud platforms

CI/CD & Kubernetes

Automation & AI

Cross-functional collaboration

Threat modeling

Tools

EDR

NGFW

SIEM

SOAR

Kubernetes

Terraform

Job description

IBM Infrastructure & Technology is seeking a cybersecurity Remediation Engineer to join the CISO Remediation Team. You will help resolve security risks across the enterprise, working at the intersection of security operations, engineering, and architecture to remediate vulnerabilities and implement durable security improvements.

As a candidate, you thrive under pressure, think like attacker and defender, and communicate clearly with technical and non-technical stakeholders.