Application Vulnerability Remediation Consultant

Title: Application Vulnerability Remediation Consultant
Location: Minneapolis, MN (Hybrid)
Job Type: W2 Contract (5 Months)
Schedule: Monday–Friday, 8:00 AM–5:00 PM
Industry: Retail
Compensation: $56.39 - $75.18/hr W2

---
About the Role
Our client, a leading organization in the retail and supply chain industry, is seeking an Application Vulnerability Remediation Consultant to support enterprise vulnerability remediation initiatives across complex hybrid operational technology (OT) and information technology (IT) environments. This role will focus on analyzing vulnerability findings, developing remediation strategies, coordinating with internal stakeholders and third-party vendors, and helping drive security improvements across business-critical applications and infrastructure.

This is an opportunity to work within a large-scale enterprise environment supporting distribution, supply chain, and technology operations where security, reliability, and operational continuity are critical. The consultant will serve as a key technical advisor, helping teams reduce risk while balancing remediation efforts with business and operational requirements.

• Review vulnerability scan results and associated remediation recommendations.
• Analyze remediation guidance and determine applicability to hosted applications, operating systems, middleware platforms, and integration components.
• Assess vulnerabilities and identify whether remediation activities are infrastructure-owned, application-owned, vendor-owned, or require shared responsibility.
• Develop remediation strategies for enterprise applications hosted within company-managed environments.
• Identify and document required remediation actions, including software updates, operating system patches, package upgrades, TLS/SSL configuration changes, certificate renewals, database driver updates, middleware upgrades, and vendor-provided fixes.
• Partner with infrastructure teams to validate server environments, virtual machine ownership, patch requirements, and remediation feasibility.
• Collaborate with application owners to evaluate dependencies, testing requirements, release schedules, and operational risks.
• Develop technical requirements and remediation packages for third-party vendors when application-level changes are required.
• Coordinate remediation efforts across infrastructure, application, security, and vendor teams through completion.
• Evaluate remediation risks, dependencies, and implementation sequencing considerations.
• Recommend interim mitigation strategies when immediate remediation is not feasible.
• Document findings, remediation requirements, implementation plans, risks, decisions, and recommended next steps.
• Support vulnerability management process improvements, ownership models, patch lifecycle practices, and future-state remediation strategies.
• Provide status reporting, issue tracking, and escalation support to project stakeholders and leadership.
• Recommend preventative controls and process enhancements based on recurring vulnerability trends.

• Experience supporting OT/IT integration environments or hybrid operational technology and enterprise IT ecosystems.
• Experience analyzing application vulnerabilities and developing remediation plans for hosted application environments.
• Working knowledge of Windows Server and Linux application hosting environments.
• Experience supporting enterprise applications hosted on virtual machine platforms.
• Knowledge of patch management, package management, software lifecycle management, dependency remediation, and application maintenance processes.
• Experience working with TLS/SSL certificates, cipher suites, secure communication protocols, and security configuration management.
• Experience supporting enterprise middleware technologies such as Java, OpenJDK, Apache, Log4j, OpenSSL, or similar platforms.
• Understanding of Microsoft security updates, SQL Server components, database drivers, runtime dependencies, and application infrastructure.
• Ability to interpret vulnerability scan findings and translate results into actionable remediation plans.
• Experience working directly with third-party vendors to coordinate and drive remediation activities.
• Strong technical documentation, communication, stakeholder management, and cross-functional collaboration skills.
• Ability to assess risks, prioritize remediation efforts, and balance security requirements with operational stability.

• Experience supporting manufacturing, distribution, warehouse, supply chain, industrial automation, or other OT-adjacent environments.
• Familiarity with integration platforms, middleware solutions, APIs, database connectivity, and message-based application architectures.
• Experience using vulnerability management tools such as Tenable, Qualys, Rapid7, or similar platforms.
• Experience supporting highly available, regulated, or mission-critical production environments.
• Experience developing repeatable remediation intake, triage, ownership, and governance processes.
• Experience creating vendor remediation packages, technical requirements documentation, security exception requests, or risk acceptance documentation.
• Ability to evaluate operational risks and implementation impacts when remediation activities affect production systems.
• Experience supporting enterprise vulnerability management or cybersecurity remediation programs within large organizations.