Remediation Oversight Analyst

3M•Maplewood, MN

1d•$164,612 - $201,193•Onsite

About The Position

3M is seeking a skilled and motivated security analyst to join our Enterprise Vulnerability Management team. The successful candidate will leverage enterprise-grade tools to conduct large-scale vulnerability discovery processes, evaluate and mitigate risks, and collaborate with cross-functional teams to enhance our security posture. You will have the opportunity to collaborate closely with cross-functional teams in IT operations, plant-level engineering, application development, and cloud operations to ensure risks are prioritized and addressed in order to positively impact the broader security landscape at 3M.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or technology field (completed and verified prior to start)
Two (2) years of experience in vulnerability management, security operations, or IT infrastructure in a private, public, government or military environment
Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).

Nice To Haves

Familiarity with common vulnerability management tools (e.g., Tenable, Rapid7, Qualys)
Understanding of CVSS scoring, patch management processes, and exploitability metrics
Experience working in large, distributed enterprise or manufacturing environments
Knowledge of cloud and container vulnerabilities
Familiarity with regulatory frameworks
Experience with CMDBs (e.g., ServiceNow), SIEM/SOAR tools, or asset discovery platforms
Security certifications (Security+, SANS GIAC, OSCP, etc.) are a plus
Exposure to OT environments is a strong plus

Responsibilities

Execute authenticated and unauthenticated scans on IT, OT, and cloud assets using enterprise-grade tools.
Perform triage and validation of vulnerability data to reduce false positives.
Analyze vulnerabilities using CVSS, EPSS, threat intelligence, and business impact scoring.
Collaborate with asset owners to assess exposure and propose remediation options.
Track remediation efforts and engage with system owners to ensure timely patching or mitigation.
Create and manage tickets in platforms such as ServiceNow or Jira.
Escalate overdue vulnerabilities according to SLA thresholds.
Lead in assessing and driving company-wide response to critical vulnerabilities.
Generate and maintain dashboards and reports on vulnerability trends, exceptions, and KPIs.
Contribute to internal and external audits by providing evidence of scanning, remediation, and compliance alignment.
Support automation and workflow enhancements for vulnerability intake, assessment, and resolution.
Contribute to playbooks, SOPs, and knowledge base documentation.
Corporate policies, procedures and security standards are complied with while performing assigned duties.
Contribute to a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and engaging in continuous improvement.