Introduction
At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high-resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability. Our teams ensure the performance, security, and scalability that clients and industries depend on every day. Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You'll work with diverse technologies and colleagues worldwide to deliver resilient, future-ready solutions that power innovation. With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.
Your role and responsibilities
The CISO Remediation Team is looking to add a cybersecurity Remediation Engineer as part of the overall Cyber Defense organization. In this role, you will contribute to and, over time, drive the technical resolution of security risk across the IBM enterprise, operating at the intersection of engineering, infrastructure operations and security architecture. You will help teams recover from incidents, remediate vulnerabilities, and implement durable, scalable security improvements.
This role is focused on implementing and driving technical remediation, not primarily identifying issues. Successful candidates typically have hands-on experience administering, operating, securing, or engineering enterprise technology environments such as operating systems, networks, cloud platforms, identity systems, virtualization platforms, databases, or applications. Experience limited to monitoring, alert triage, incident coordination, compliance, or assessment activities without direct responsibility for implementing technical changes may not provide sufficient background for this role.
Depending on the engagement and experience level, you may remediate issues directly, partner with engineering teams to drive fixes, or design repeatable remediation patterns. This role is not a primary SOC, detection, or application security pipeline ownership role, but partners closely with those teams to drive remediation outcomes.
The ideal candidate enjoys solving complex technical problems, has experience operating and securing enterprise technology environments, and communicates effectively with both technical and non-technical stakeholders.
This role spans multiple technical domains. Candidates are not expected to be experts in all areas; strong candidates demonstrate deep expertise in one or two domains and working knowledge of adjacent areas.
Areas of specialization may include:
- Identity & Active Directory Security: Active Directory and Entra ID administration, Group Policy, privileged access management, authentication services, identity hardening, and recovery operations.
- Scripting, Automation & Infrastructure as Code: Python, Ansible, Terraform, or similar tooling
- Cloud & Virtualized Environments: IBM Cloud, AWS, Azure, Google Cloud Platform; virtualization and container platforms
- Operating Systems & Networking: Windows or Linux; network segmentation, SDN, and isolation techniques
- Security Infrastructure & Controls: Endpoint protection platforms, firewall technologies, identity systems, vulnerability management platforms, privileged access management solutions, and security automation tooling.
Key Duties:- Support containment, recovery, vulnerability remediation, and post-incident corrective actions by identifying root causes, implementing technical fixes, hardening configurations, deploying security controls, and validating risk reduction outcomes.
- Partner with product, engineering, and infrastructure teams to implement remediation plans and improve the security posture of their environments.
- Drive the implementation of secure configurations across infrastructure, operating systems, cloud platforms, identity systems, and applications.
- Create technical documentation outlining remediation guidance and security best practices.
Develop or implement automation and tooling to accelerate remediation, configuration management, vulnerability reduction, and security operations at scale.
Required education
Bachelor's Degree
Required technical and professional expertise
- 4-8 years of experience in infrastructure engineering, systems administration, cloud engineering, network engineering, platform engineering, SRE, DevOps, or security engineering roles with direct responsibility for operating and securing production technology environments.
- Experience troubleshooting, administering, and securing production technology environments, including hands-on remediation activities such as system hardening, patch management, access control remediation, network segmentation, configuration management, security control deployment, infrastructure upgrades, and cloud security improvements.
- Ability to work independently or as part of a team while operating effectively in ambiguous, fast-moving environments.
- Strong problem-solving skills with attention to detail and a proactive mindset.
- Strong interpersonal and communication skills with the ability to work effectively across engineering, security, and business teams; and explain technical remediation steps to non-technical stakeholders.
- Ability to collaborate effectively and, with experience, influence remediation outcomes across federated teams.
- Ability to leverage automation and AI-assisted tooling to improve remediation effectiveness and operational efficiency.
- Knowledge of vulnerability management and remediation techniques across infrastructure, cloud, identity and/or application environments.
Preferred technical and professional experience
- Prior experience as a systems administrator, network engineer, cloud engineer, platform engineer, site reliability engineer (SRE), infrastructure engineer, or similar hands-on operational role; experience supporting incident recovery or post-incident remediation is highly desirable.
- Experience with cloud platforms, CI/CD pipelines, containerization, and Kubernetes.
- Experience using automation and AI to reduce mean time to remediation (MTTR).
- Familiarity with Agile development environments.
- Foundational understanding of cybersecurity frameworks and regulations and how they inform risk-based remediation decisions. (e.g., NIST CSF, NIST 800-series, ISO 27001, PCI.)
ABOUT BUSINESS UNITIBM Systems helps IT leaders think differently about their infrastructure. IBM servers and storage are no longer inanimate - they can understand, reason, and learn so our clients can innovate while avoiding IT issues. Our systems power the world's most important industries and our clients are the architects of the future. Join us to help build our leading-edge technology portfolio designed for cognitive business and optimized for cloud computing.
YOUR LIFE @ IBMIn a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.
Being an IBMer means you'll be able to learn and develop yourself and your career, you'll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.
Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do.
Are you ready to be an IBMer?
ABOUT IBMIBM's greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.
Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we're also one of the biggest technology and consulting employers, with many of the Fortune 500 companies relying on the IBM Cloud to run their business.
At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it's time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.
IBM is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
OTHER RELEVANT JOB DETAILSIBM offers a competitive and comprehensive benefits program. Eligible employees may have access to:
- Healthcare benefits including medical & prescription drug coverage, dental, vision, and mental health & well being
- Financial programs such as 401(k), cash balance pension plan, the IBM Employee Stock Purchase Plan, financial counseling, life insurance, short & long- term disability coverage, and opportunities for performance based salary incentive programs
- Generous paid time off including 12 holidays, minimum 56 hours sick time, 120 hours vacation, 12 weeks parental bonding leave in accordance with IBM Policy, and other Paid Care Leave programs. IBM also offers paid family leave benefits to eligible employees where required by applicable law
- Training and educational resources on our personalized, AI-driven learning platform where IBMers can grow skills and obtain industry-recognized certifications to achieve their career goals
- Diverse and inclusive employee resource groups, giving & volunteer opportunities, and discounts on retail products, services & experiences
We consider qualified applicants with criminal histories, consistent with applicable law.
This position was posted on the date cited in the key job details section and is anticipated to remain posted for 21 days from this date or less if not needed to fill the role.
IBM will not be providing visa sponsorship for this position now or in the future. Therefore, in order to be considered for this position, you must have the ability to work without a need for current or future visa sponsorship.
The compensation range and benefits for this position are based on a full-time schedule for a full calendar year. The salary will vary depending on your job-related skills, experience and location. Pay increment and frequency of pay will be in accordance with employment classification and applicable laws. For part time roles, your compensation and benefits will be adjusted to reflect your hours. Benefits may be pro-rated for those who start working during the calendar year.
