[Hiring] Security Triage & Remediation Lead @CI&T

Role Description

We are seeking an experienced Security Triage & Remediation Lead to own the triage and strategy function for a large US mortgage lender's enterprise vulnerability program. You will decide what gets fixed, in what order, and how — analyzing blast radius, sequencing remediation across teams you don't manage, and leading a live secrets rotation effort. You will also help upskill the client's internal engineering team, who know their codebase deeply but are new to enterprise-level triage work.

• Triage inbound vulnerabilities: validate, classify, and prioritize based on real exploitability and business impact rather than scanner severity alone.
• Perform blast-radius and impact analysis across affected systems, services, and downstream consumers.
• Own the secrets rotation strategy: inventory affected credentials, map ownership and consumers, and sequence rotation safely across production systems.
• Coordinate remediation across multiple client delivery teams, aligning owners and unblocking work that spans team boundaries.
• Define and maintain the remediation playbook: intake, severity criteria, SLAs, escalation paths, and closure criteria.
• Report risk posture and backlog burn-down to VP-level client stakeholders in business language.
• Provide technical direction to the remediation engineers: scope their work, review approach, and validate that fixes actually close the finding.
• Upskill the client's internal team on triage methodology and secure remediation practices.
• Integrate security validation and evidence capture into the client's existing delivery pipeline.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Solid experience in application security, vulnerability management, or security engineering.
• Excellent English communication skills (reading, writing, and speaking) — this role leads calls with VP-level stakeholders.
• Proven ownership of a vulnerability remediation program or triage function at enterprise scale.
• Hands-on experience with secrets management and production credential rotation (AWS Secrets Manager, HashiCorp Vault, Parameter Store, or equivalent).
• Strong AWS security fundamentals: IAM, least privilege, network exposure, and logging.
• Ability to read and assess PHP code well enough to validate a remediation approach.
• Expertise in threat modeling and blast-radius analysis, with practical command of CVSS, CWE, and the OWASP Top 10.
• Proven track record of coordinating technical work across teams without formal authority.

Requirements

• Experience in financial services, mortgage, or another regulated industry.
• Incident response experience — containment, investigation, and post-incident hardening.
• Familiarity with SAST, DAST, and SCA tooling (Snyk, Veracode, Checkmarx, Dependabot).
• Exposure to legacy stacks, particularly IBM i / RPG or mainframe-adjacent systems.
• Security certifications such as CISSP, OSCP, AWS Security Specialty, or GIAC.
• Experience working with international clients in an embedded consulting role.

Benefits

• Health and dental insurance
• Meal and food allowance
• Childcare assistance
• Extended paternity leave
• Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass
• Profit Sharing and Results Participation (PLR)
• Life insurance
• Continuous learning platform (CI&T University)
• Discount club
• Free online platform dedicated to physical, mental, and overall well-being
• Pregnancy and responsible parenting course
• Partnerships with online learning platforms
• Language learning platform
• And many more!