FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Tech Stack
Tools & technologiesCyber SecurityServiceNow
About the role
Key responsibilities & impact- Supports the SEC ISS contract by helping maintain a secure and compliant IT infrastructure through disciplined POAM and vulnerability management
- Identifies, tracks, and assists with remediation of security vulnerabilities across infrastructure systems
- Supports risk management activities, including documentation, reporting, and audit remediation support required to sustain operational authorization and security posture
- Coordinates with technical teams to plan mitigation actions, drive POAM closure, and reduce recurring security risk
- Supports development, implementation, and management of POAMs for IT infrastructure security findings
- Tracks POAM milestones, ownership, due dates, and dependencies; escalates risks to closure timelines
- Validates remediation evidence and updates POAM records to reflect status and completion
- Maintains accurate POAM reporting to support contract deliverables and SEC oversight
- Reviews vulnerability findings and assists with severity/impact assessment and prioritization
- Coordinates with infrastructure and operations teams to implement timely remediation actions
- Assists in resolving vulnerabilities through patching, configuration correction, and compensating controls
- Helps monitor open vulnerabilities and promotes proactive measures to reduce reintroduction of findings
- Supports security risk and compliance activities for ISS-supported systems
- Assists with security documentation aligned to SOPs, change control, and system baselines
- Provides support for audit remediation activities, including internal reviews and external oversight audits
- Prepares recurring status updates on vulnerability trends, POAM health, and mitigation progress
- Records remediation actions and supporting evidence in approved workflows
- Coordinates with cross-functional teams to resolve blockers affecting remediation timelines
- Supports surge and incident follow-up activities only as directed by contract tasking
Requirements
What you’ll need- Bachelors degree in a relevant field (e.g., Information Technology, Cybersecurity, Computer Science, Engineering)
- 4-8 years of experience identifying and resolving IT security vulnerabilities
- Experience supporting development, implementation, and management of POAMs for IT infrastructure systems
- Experience planning and coordinating mitigation of POAM findings in enterprise IT environments
- IT vulnerability identification, analysis, tracking, and remediation support
- POAM lifecycle support, milestone tracking, and closure documentation
- Security documentation and status reporting for vulnerability and POAM remediation activities
- Experience supporting federal civilian IT environments and contract-based service delivery (preferred)
- Experience owning NIST RMF/FISMA security assessment or audit artifact packages (preferred)
- Experience using ServiceNow security workflows for vulnerability and POAM tracking/reporting (preferred)
- Strong written communication for remediation status, milestone tracking, and closure evidence (preferred)
- Professional security certification such as Security+, CySA+, CISM, or CISSP (preferred)
Benefits
Comp & perks- Health and Wellness programs
- Income Protection
- Paid Leave
- Retirement
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
IT security vulnerability identificationvulnerability managementPOAM developmentrisk managementsecurity documentationmilestone trackingremediation supportaudit remediationconfiguration correctionpatching
Soft Skills
written communicationcoordinationproblem-solvingorganizational skillsteam collaboration
Certifications
Security+CySA+CISMCISSP