Security Remediation Specialist

Gravity IT Resources; Utah; Remote; USD 41,328 - 55,104; Full time

Job summary

A leading staffing agency is hiring a Security Remediation Analyst to work remotely in Utah. This position requires a detail-oriented individual skilled in vulnerability resolution and cross-team collaboration. Responsibilities include identifying and remediating sensitive data, managing security patches across multiple GitHub repositories, and implementing automation rules in Jira. Competitive contract compensation offered, making it ideal for tech-savvy professionals with experience in SAST/SCA tools.

Qualifications

• Experience with code fixes and upgrading libraries.
• Ability to identify and coordinate secret management with DevOps.
• Familiarity with managing security patches across multiple repositories.

Responsibilities

• Fix vulnerabilities and remediate findings from SAST/SCA tools.
• Identify and liquidate hardcoded secrets.
• Manage security patch rollout while minimizing disruptions.
• Evaluate findings to prioritize risks and document outcomes.
• Configure automated scans to identify sensitive data.
• Execute masking or redaction of sensitive information.

Skills

Attention to detail

Cross team collaboration

Vulnerability resolution

Knowledge of SAST/SCA tools

Jira automation

Tools

GitHub

Jira

CodeQL

Dependabot

Soteri

Atlassian Guard

Job description

This range is provided by Gravity IT Resources. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Job Title: Security Remediation Analyst

Location: Sat Lake, Utah - Remote

Job-Type: Contract - 12-14 Weeks

Compensation: $30-40/hr

Position Overview

We are seeking a highly collaborative and organized individual to remediate and remove commitments in our client’s repository. This role requires attention to detail, commitment to documentation, and cross team collaboration. Execute a high-velocity security "burn-down" across 150+ GitHub repositories and perform a comprehensive PII sanitization of our Jira instance.

Key Responsibilities

• Vulnerability Resolution: Hands‑on fixing of SAST/SCA findings (e.g., CodeQL, Dependabot). Writing code fixes and upgrading libraries.
• Secret Liquidation: Identifying hardcoded secrets, coordinating with DevOps for rotation, and using tools (like git-filter-repo) to scrub them from Git history.
• Bulk PR Management: Managing the rollout of security patches across 150 repositories, ensuring minimal disruption to development workflows.
• Triage: Evaluating findings to prioritize "Critical" and "High" risks while documenting false positives.
• PII Scanning: Configuring and running automated scans (e.g., Soteri, Atlassian Guard) to identify sensitive data (SSNs, CCs, Credentials) in Jira tickets, comments, and attachments.
• Data Redaction: Executing the permanent redaction or masking of PII while maintaining the integrity of ticket history.
• Prevention Logic: Implementing Jira Automation rules or "hooks" to prevent future PII leaks.

Seniority level

Associate

Employment type

Contract

Job function

Information Technology

Industries

Staffing and Recruiting