Cybersecurity Remediation Engineer

About the role

The Cybersecurity Remediation Engineer will join the CISO Remediation Team within the Cyber Defense organization. You will help the enterprise recover from security incidents, remediate vulnerabilities, and build durable, scalable security improvements across cloud, container, and on‑premise environments.

Key responsibilities

• Support containment, recovery and post‑incident remediation by identifying root causes and implementing technical fixes.
• Partner with product, engineering and infrastructure teams to embed security into existing development and operations practices.
• Conduct security and risk assessments, including threat modeling and targeted technical reviews of applications, platforms and infrastructure.
• Create technical documentation that outlines remediation guidance and security best practices.
• Develop or integrate tools for detection, prevention and analysis of security threats, leveraging automation and AI to reduce MTTR.

Required profile

• Bachelor's degree (or equivalent experience).
• 4–8 years of experience in security engineering or related fields such as networking, cloud, or application development.
• Hands‑on experience supporting incident response or post‑incident remediation.
• Familiarity with Agile development environments and cybersecurity frameworks/regulations.

Required skills

• Python, Ansible, Terraform (or similar IaC tools).
• IBM Cloud, AWS, Azure, GCP.
• Virtualization and container platforms (Docker, Kubernetes).
• Windows and Linux operating systems, network segmentation, SDN, isolation techniques.
• Security technologies: EDR, NGFW, IDS, SIEM, SOAR.
• CI/CD pipelines, automation, AI for security operations.