Vulnerability Risk & Remediation Specialist - Remote

Softthink Solutions Inc; Oregon; Híbrido; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Softthink Solutions Inc. is seeking a Vulnerability Management & Remediation Specialist. This remote role focuses on enterprise vulnerability assessments, critical remediation, patch coordination, and risk reduction across Windows, Linux, network, and cloud.

The ideal candidate will manage KEVs, leverage Nessus/Qualys/Rapid7, and drive remediation with security engineers and admins while meeting deadlines and minimizing operational impact. Federal practice familiarity is a plus.

Formación

• 8+ years of professional experience in cybersecurity, vulnerability management, or related IT security disciplines.
• Hands-on experience managing enterprise vulnerability assessments, patch coordination, and remediation tracking.
• Strong knowledge of the KEV Catalog, CVEs, CVSS scoring, and risk-based vulnerability prioritization.
• Experience with vulnerability scanning tools such as Nessus, Qualys, or Rapid7.
• Experience supporting remediation across Windows, Linux, networks, and cloud environments.
• Familiarity with NIST SP 800-53, NIST SP 800-40, RMF, and federal vulnerability practices.
• Ability to coordinate remediation across multiple teams and document outcomes.

Responsabilidades

• Identify, prioritize, and coordinate remediation of critical vulnerabilities across enterprise IT systems and cloud environments.
• Monitor KEV Catalog and evaluate vulnerabilities for organizational impact.
• Analyze scan results, affected assets, exposure levels, exploitability, and critical dependencies.
• Develop actionable remediation plans including patching, config changes, and compensating controls.
• Coordinate remediation activities with security, systems, network, cloud providers, and MSPs.
• Support accelerated remediation within established security deadlines.
• Validate remediation via rescans, patch verification, and config assessments.
• Operate vulnerability scanning platforms such as Nessus, Qualys, and Rapid7.
• Track remediation progress, findings, dependencies, exceptions, and residual risks.
• Identify blockers and propose alternative risk mitigations when patching isn't feasible.
• Support change management and coordinate approved system configuration changes.
• Collaborate with incident response and forensics teams to preserve evidence during remediation.
• Prepare assessment reports, status updates, risk summaries, and executive dashboards.
• Maintain accurate vulnerability records and evidence for audits and compliance.

Conocimientos

Vulnerability mgmt

KEV knowledge

Vuln scanning tools

Patch coordination

Risk prioritization

Educación

Bachelor's degree or equivalent

Herramientas

Tenable Nessus

Qualys

Rapid7

Microsoft Defender

CrowdStrike

Splunk

Microsoft Sentinel

Microsoft Intune

Configuration Manager

Descripción del empleo

Softthink Solutions Inc. is seeking a Vulnerability Management & Remediation Specialist. This remote role focuses on enterprise vulnerability assessments, critical remediation, patch coordination, and risk reduction across Windows, Linux, network, and cloud.

The ideal candidate will manage KEVs, leverage Nessus/Qualys/Rapid7, and drive remediation with security engineers and admins while meeting deadlines and minimizing operational impact. Federal practice familiarity is a plus.