Job Summary
As a Security Remediation Engineer, you will execute and support Cyber Tier Risk Assessment services, including Microsoft 365 Automated Policy Benchmarking and Vulnerability and Remediation Management. You will own the technical remediation lifecycle for security findings originating from third-party security vendors, internal assessments, and the vulnerability management as a service (VMaaS) engine.
This role requires strong hands-on expertise in identifying, testing, implementing, and validating security remediations across modern cloud and enterprise environments. You will articulate remediation outcomes, risks, and tradeoffs to both technical and non-technical stakeholders, ensuring transparency and accuracy throughout delivery. A successful candidate brings deep knowledge of how modern technologies are compromised and secured, and applies that knowledge to deliver reliable, repeatable security improvements.
Responsibilities (including, but not limited to the following)
- Remediate security vulnerabilities through comprehensive testing and risk forecasting to ensure timely and effective implementation of controls.
- Develop and document standardized processes and procedures for security remediation to ensure consistency and scalability.
- Track, manage, and report on remediation requests, providing clear visibility to clients regarding progress and outcomes from vendor-driven engagements.
- Act as the primary escalation point for Security Remediation Engineers, offering guidance and resolving complex technical issues.
- Lead client-facing calls and presentations to communicate remediation status, address concerns, and align with security objectives.
- Project manage specialized remediation initiatives and one-off projects originating from CTM team responsibilities.
- Analyze unresolved issues and negative outcomes, recommending process improvements and preventive measures.
- Create and maintain detailed documentation for systems, processes, and remediation workflows.
- Own and drive resolution of pending issues, ensuring accountability and timely closure.
- Advise stakeholders and translate business requirements into secure, reliable technical solutions.
- Implement and manage email security measures to protect against phishing and other cyber threats.
- Execute vulnerability remediation strategies to identify and mitigate security weaknesses across systems and networks.
- Apply and enforce security best practices and industry standards throughout remediation activities.
- Configure and manage cloud services, email security, and baseline hardening, ensuring adherence to standard configurations.
Qualifications
- 5 years of experience in Vulnerability Management
- Minimum 3–4 years of cybersecurity experience in a cloud services environment.
- Minimum 3–4 years of experience in a client-facing technology role.
- Minimum 3–4 years of experience in a systems engineering position.
- Experience in the financial sector is a plus.
- Experience working at an MSP is a plus.
- Security and/or systems certifications are a plus
Education/Certifications:
- Security and/or systems certifications are a plus
- Security+ (nice to have)
- Network+ (nice to have)
- MS AZ-500, SC-100, SC-200 (nice to have)
Skills
- Ability to design and deliver tailored security technology solutions for clients, ensuring scalability and compliance with industry standards.
- Proven capability to perform under pressure and meet aggressive deadlines, while maintaining accuracy and security integrity.
- Highly analytical and logical thinker, skilled in advanced root cause analysis and problem resolution.
- Flexibility to occasionally work nights and weekends, with strong prioritization and time management skills.
- Deep technical expertise in public cloud platforms, particularly Microsoft Office 365 and Azure, including advanced configuration and security hardening.
- Advanced proficiency in Windows Server technologies, including Active Directory, Group Policy, and Identity Management (Entra/Okta).
Attributes that will drive success
- Exceptional attention to detail and a commitment to data integrity
- Ability to translate "data speak" into clear business insights for non-technical stakeholders
- Strong project management skills with the ability to handle multiple deadlines simultaneously
If you feel you have the necessary experience to go forward for this role, please apply now. We'd love to see your CV.
Polite Notice to Recruitment Agencies: We are recruiting for this role directly, but we do have a preferred supplier list of valued recruitment partners who support us when we need a little extra help. If you are not one of our preferred recruitment partners, we won't accept your CV introductions or grant any candidate ownership to any introductions that you make.
Abacus Information Technology Limited is an equal opportunities employer. We value diversity and promote equality across our business. The terminology used in this advert is not intended to discriminate against any of the protected characteristics that fall under the Equality Act 2010. Therefore, we welcome qualified applicants applications from all sections of society and are always happy to discuss reasonable adjustments and / or additional arrangements as required to support your application.
This role may be subject to a background check after an employment offer has been made, and final employment will be subject to a positive result; in addition, a reference and DBS check may be requested at the final stage of the process.
