Remediation Oversight Analyst

3M • Maplewood, MN

2d • $164,612 - $201,193 • Onsite

About The Position

3M is seeking a security analyst to join its Enterprise Vulnerability Management team. The role uses enterprise-grade tools to discover vulnerabilities at scale, evaluate and mitigate risks, and work with cross-functional teams to improve 3M’s security posture. The analyst collaborates with IT operations, plant-level engineering, application development, and cloud operations to prioritize and address risks across the company.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a technology field, completed and verified before starting.
• At least two years of experience in vulnerability management, security operations, or IT infrastructure in a private, public, government, or military environment.
• Must be legally authorized to work in the country of employment without sponsorship for employment visa status.

Nice To Haves

• Familiarity with vulnerability management tools such as Tenable, Rapid7, or Qualys.
• Understanding of CVSS scoring, patch management processes, and exploitability metrics.
• Experience in large, distributed enterprise or manufacturing environments.
• Knowledge of cloud and container vulnerabilities.
• Familiarity with regulatory frameworks.
• Experience with CMDBs such as ServiceNow, SIEM/SOAR tools, or asset discovery platforms.
• Security certifications such as Security+, SANS GIAC, or OSCP.
• Exposure to OT environments.

Responsibilities

• Execute authenticated and unauthenticated vulnerability scans on IT, OT, and cloud assets using enterprise-grade tools.
• Triage and validate vulnerability data to reduce false positives.
• Analyze vulnerabilities using CVSS, EPSS, threat intelligence, and business impact scoring.
• Collaborate with asset owners to assess exposure and propose remediation options.
• Track remediation efforts and engage system owners to support timely patching or mitigation.
• Create and manage tickets in platforms such as ServiceNow or Jira.
• Escalate overdue vulnerabilities according to SLA thresholds.
• Lead assessment of and drive company-wide responses to critical vulnerabilities.
• Generate and maintain dashboards and reports on vulnerability trends, exceptions, and KPIs.
• Provide evidence of scanning, remediation, and compliance alignment for internal and external audits.
• Support automation and workflow improvements for vulnerability intake, assessment, and resolution.
• Contribute to playbooks, standard operating procedures, and knowledge base documentation.
• Comply with corporate policies, procedures, and security standards while performing assigned duties.
• Follow safety policies, identify hazards, and contribute to continuous improvement in the Environmental Health and Safety culture.

Benefits

• Relocation assistance.
• Potential eligibility for medical, dental, and vision benefits; health savings accounts; health care and dependent care flexible spending accounts; disability benefits; life insurance; voluntary benefits; paid absences; and retirement benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level