Security Remediation Specialist

This range is provided by Gravity IT Resources. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Job Title: Security Remediation Analyst

Location: Sat Lake, Utah - Remote

Job-Type: Contract - 12-14 Weeks

Compensation: $30-40/hr

We are seeking a highly collaborative and organized individual to remediate and remove commitments in our client’s repository. This role requires attention to detail, commitment to documentation, and cross team collaboration. Execute a high-velocity security "burn-down" across 150+ Git Hub repositories and perform a comprehensive PII sanitization of our Jira instance.

• Vulnerability Resolution:
  Hands‑on fixing of SAST/SCA findings (e.g., CodeQL, Dependabot). Writing code fixes and upgrading libraries.
• Secret Liquidation:
  Identifying hardcoded secrets, coordinating with Dev Ops for rotation, and using tools (like git-filter-repo) to scrub them from Git history.
• Bulk PR Management:
  Managing the rollout of security patches across 150 repositories, ensuring minimal disruption to development workflows.
• Triage:
  Evaluating findings to prioritize "Critical" and "High" risks while documenting false positives.
• PII Scanning:
  Configuring and running automated scans (e.g., Soteri, Atlassian Guard) to identify sensitive data (SSNs, CCs, Credentials) in Jira tickets, comments, and attachments.
• Data Redaction:
  Executing the permanent redaction or masking of PII while maintaining the integrity of ticket history.
• Prevention Logic:
  Implementing Jira Automation rules or "hooks" to prevent future PII leaks.

Associate

Contract

Information Technology

Staffing and Recruiting