Remediation Oversight Analyst

Remediation Oversight Analyst​

Choosing where to start and grow your career has a major impact on your professional and personal life, so it’s equally important you know that the company that you choose to work at, and its leaders, will support and guide you. With a variety of people, global locations, technologies and products, 3M is a place where you can collaborate with other curious, creative 3Mers.

3M is seeking a skilled and motivated security analyst to join our Enterprise Vulnerability Management team. The successful candidate will leverage enterprise-grade tools to conduct large-scale vulnerability discovery processes, evaluate and mitigate risks, and collaborate with cross-functional teams to enhance our security posture. You will have the opportunity to collaborate closely with cross-functional teams in IT operations, plant-level engineering, application development, and cloud operations to ensure risks are prioritized and addressed in order to positively impact the broader security landscape at 3M.

Here, you will make an impact by:

Vulnerability Detection & Validation ​

• Execute authenticated and unauthenticated scans on IT, OT, and cloud assets using enterprise-grade tools.​
• Perform triage and validation of vulnerability data to reduce false positives.​

​Risk Assessment & Prioritization​

• Analyze vulnerabilities using CVSS, EPSS, threat intelligence, and business impact scoring.​
• Collaborate with asset owners to assess exposure and propose remediation options.​​

Remediation Coordination​

• Track remediation efforts and engage with system owners to ensure timely patching or mitigation.
• Create and manage tickets in platforms such as ServiceNow or Jira.​
• Escalate overdue vulnerabilities according to SLA thresholds.​
• Lead in assessing and driving company-wide response to critical vulnerabilities.​

Monitoring & Reporting​

• Generate and maintain dashboards and reports on vulnerability trends, exceptions, and KPIs.​
• Contribute to internal and external audits by providing evidence of scanning, remediation, and compliance alignment.​

​Process Improvement​

• Support automation and workflow enhancements for vulnerability intake, assessment, and resolution.​
• Contribute to playbooks, SOPs, and knowledge base documentation.​

To set you up for success in this role from day one, 3M requires (at a minimum) the following qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or technology field (completed and verified prior to start)
• Two (2) years of experience in vulnerability management, security operations, or IT infrastructure​ in a private, public, government or military environment

Additional qualifications that could help you succeed even further in this role include:

• Familiarity with common vulnerability management tools (e.g., Tenable, Rapid7, Qualys)​
• Understanding of CVSS scoring, patch management processes, and exploitability metrics
• Experience working in large, distributed enterprise or manufacturing environments​
• Knowledge of cloud and container vulnerabilities​
• Familiarity with regulatory frameworks​
• Experience with CMDBs (e.g., ServiceNow), SIEM/SOAR tools, or asset discovery platforms​
• Security certifications (Security+, SANS GIAC, OSCP, etc.) are a plus​
• Exposure to OT environments is a strong plus

3M offers many programs to help you live your best life – both physically and financially. To ensure competitive pay and benefits, 3M regularly benchmarks with other companies that are comparable in size and scope. 

For assistance with searching through our current job openings or for more information about all things 3M, visit Max, our virtual recruiting assistant on 3M.com/careers. 

Carefully read these Terms of Use before using this website. Your access to and use of this website and application for a job at 3M are conditioned on your acceptance and compliance with these terms.

Please click on the following links and select the country where you are applying for employment to review the applicable Terms of Use (link here) and Privacy Policy (link here). Before submitting your application, you will be asked to confirm your agreement with the terms.