What are the responsibilities and job description for the Security Remediation Specialist position at Gravity IT Resources?
Job Title: Security Remediation Analyst
Location: Sat Lake, Utah- Remote
Job-Type: Contract- 12-14 Weeks
Compensation: $30-40/hr
Position Overview:
We are seeking a highly collaborative and organized individual to remediate and remove commitments in our client’s repository. This role requires attention to detail, commitment to documentation, and cross team collaboration. Execute a high-velocity security "burn-down" across 150 GitHub repositories and perform a comprehensive PII sanitization of our Jira instance.
Key Responsibilities
Vulnerability Resolution: Hands-on fixing of SAST/SCA findings (e.g., CodeQL, Dependabot). You will be responsible for writing the code fixes and upgrading libraries.
Secret Liquidation: Identifying hardcoded secrets, coordinating with DevOps for rotation, and using tools (like git-filter-repo) to scrub them from Git history.
Bulk PR Management: Managing the rollout of security patches across 150 repositories, ensuring minimal disruption to development workflows.
Triage: Evaluating findings to prioritize "Critical" and "High" risks while documenting false positives.
PII Scanning: Configuring and running automated scans (e.g., Soteri, Atlassian Guard) to identify sensitive data (SSNs, CCs, Credentials) in Jira tickets, comments, and attachments.
Data Redaction: Executing the permanent redaction or masking of PII while maintaining the integrity of ticket history.
Prevention Logic: Implementing Jira Automation rules or "hooks" to prevent future PII leaks.
Salary : $30 - $40