HybridLocal TX Govt Security Analyst (vulnerability remediation)

Job ID: TX-RITM()

Hybrid/Local TX Govt Security Analyst (vulnerability remediation/15) with ServiceNow Windows/Linux/RHEL/Citrix risk mitigation experience

Location: Austin TX (DOT)
Duration: 12 Months

Skills:
3 Required Proven experience coordinating server vulnerability remediation in an enterprise environment.
3 Required Strong hands on experience with ServiceNow including Change Management and IT Remediation Workspace.
3 Required Solid understanding of change management processes and presenting changes to a CAB.
3 Required Practical knowledge of server platforms: Windows Server Linux Server Citrix Infrastructure
3 Required Exceptional organizational skills with the ability to manage multiple parallel remediation efforts.
3 Required Strong written and verbal communication skills especially for CAB and cross team coordination.
1 Preferred Experience supporting vulnerability remediation in a government regulated or large enterprise environment.
1 Preferred Familiarity with vulnerability management workflows involving CSOC Infrastructure and Application teams.
1 Preferred Experience coordinating remediation outside of standard patching schedules (emergency or out of band remediation).
1 Preferred Prior exposure to audit compliance or security evidence collection related to vulnerability remediation.
1 Preferred Timely remediation of high risk and exception-based vulnerabilities.
1 Preferred High quality CAB approved change records with complete and accurate documentation.
1 Preferred Clear auditable tracking of vulnerability remediation status from assignment through closure.
1 Preferred Improved coordination and reduced remediation delays across server platforms.

Description:
A Systems Analyst I will function as the Vulnerability Remediation person for the TxDOT Server Team. This will allow us to remediate more vulnerabilities and stay in a ready state regarding vulnerability remediation. The Vulnerability Remediation & Change Coordination Analyst is responsible for coordinating tracking and facilitating the remediation of server vulnerabilities that fall outside standard patching schedules. This role serves as the primary interface between Cyber Security the Server Operations teams and Change Management to ensure high-risk and exception-based vulnerabilities are remediated in a timely auditable and compliant manner. The position leverages ServiceNow including the IT Remediation Workspace to manage end-to-end vulnerability remediation activities and to present remediation changes to Change Advisory Board (CAB). The role supports enterprise server platforms including Windows Linux and Citrix and requires strong organizational communication and change management skills rather than day-to-day patch execution.

Primary Responsibilities
Vulnerability Remediation Coordination
Review triage and manage vulnerability remediation assignments within ServiceNow IT Remediation Workspace.
Coordinate remediation efforts for vulnerabilities that cannot be addressed through normal patch cycles (e.g. emergency high-risk CVEs exceptions or special remediation scenarios).
Serve as the central point of coordination between Server Operations Security (CSOC) and other impacted teams throughout the remediation lifecycle.
Track remediation status dependencies and outstanding actions to ensure vulnerabilities progress to closure in accordance with policy and risk priorities.
Ensure remediation activities align with the Vulnerability Remediation Process and supporting work instructions.

ServiceNow & IT Remediation Workspace
Create manage and update:
Vulnerability Remediation Tasks (VUL)
Associated Change Requests
Related Configuration Items (CIs)
Ensure accurate documentation of remediation plans implementation steps validation outcomes and rollback plans within ServiceNow records.
Validate that vulnerability remediation tasks meet ServiceNow process requirements and audit expectations before change submission.
Coordinate remediation sequencing across multiple server platforms and support teams using ServiceNow workflows and assignment rules.

Change Management & CAB Presentation
Prepare and submit Normal and Standard Change Requests for vulnerability remediation activities.
Present vulnerability remediation changes to CAB clearly articulating:
Security risk and urgency
Scope and impacted systems
Remediation approach
Testing and validation plans
Rollback and risk mitigation measures
Address CAB questions and coordinate follow up actions as needed to secure approval.
Ensure approved changes are scheduled communicated and implemented in alignment with change windows and operational constraints.

Cross Platform Server Support
Coordinate vulnerability remediation across:
Windows Server environments
Linux Server environments (RHEL)
Citrix server platforms
Work with platform SMEs to understand remediation requirements and constraints without directly executing patching activities.
Ensure consistent remediation tracking and reporting across heterogeneous server platforms.

Organization Tracking & Reporting
Maintain detailed tracking of:
Outstanding vulnerabilities
Change approvals
Implementation status
Validation and closure evidence
Support audit compliance and leadership reporting with accurate up to date remediation metrics and status summaries.
Identify process gaps bottlenecks or recurring issues and recommend improvements to remediation and change workflows.

RITM(1).docx

innoSoul Inc. is an Information Technology company and offers technology solutions in various platforms to different business domains. More specifically business solutions for Application Development System integration network or software installation support Custom Web Development Hosting solutions. Our value-added solutions leverage technology to enhance business performance increase productivity and secure data.