Vulnerability & Risk Remediation Specialist

Overview

This role focuses on mitigating risks across high-priority acquired entities through comprehensive vulnerability and risk remediation activities. The position supports a surge model to enhance cybersecurity defenses by managing vulnerabilities, executing action plans, and improving security controls.

Key Responsibilities

• Remediate security findings identified in acquired entities.
• Develop and implement actionable remediation plans.
• Manage risk tracking records and documentation.
• Apply and improve security controls and conduct defensive enhancements.
• Perform corrective measures after security incidents.

Scope of Work

• Expand and verify external asset inventories within assigned scope.
• Ensure thoroughness and precision in attack surface management (ASM) visibility and validation.
• Perform ongoing validation of attack surface discovery.
• Identify and address gaps in tooling and coverage.
• Classify and prioritize vulnerabilities into primary (P0/P1) and secondary categories based on risk context.
• Enhance remediation throughput by increasing completion rate monthly and ensuring full vulnerability resolution per wave.
• Continuously monitor active vulnerabilities and escalate high-risk exposures promptly.

Required Skills and Qualifications

• Proven experience in attack surface management (ASM) including vulnerability detection, classification, risk rating, and reporting.
• Familiarity with multiple scanning and patching platforms.
• Strong documentation and communication skills.
• Technical expertise in incident response, threat hunting, and threat intelligence.
• Deep understanding of vulnerability exploitability and real-world security risks.

Additional Information

The engagement is a long-term contract based out of Eden Prairie, MN 55344, with remote work enabled. The position emphasizes increasing the speed and quality of vulnerability remediation activities while maintaining rigorous risk assessment and monitoring processes.

Contact

For more details, contact Elyash Khan at Raas Infotek, Newark, DE 19702, phone: 302-286-9976, email: [email protected].