Remediation Oversight Analyst

The Impact You Will Make in this Role

3M is seeking a skilled and motivated security analyst to join our Enterprise Vulnerability Management team. The successful candidate will leverage enterprise-grade tools to conduct large-scale vulnerability discovery processes, evaluate and mitigate risks, and collaborate with cross-functional teams to enhance our security posture. You will have the opportunity to collaborate closely with cross-functional teams in IT operations, plant-level engineering, application development, and cloud operations to ensure risks are prioritized and addressed in order to positively impact the broader security landscape at 3M.

Here, You Will Make An Impact By

• Vulnerability Detection & Validation: Execute authenticated and unauthenticated scans on IT, OT, and cloud assets using enterprise-grade tools. Perform triage and validation of vulnerability data to reduce false positives.
• Risk Assessment & Prioritization: Analyze vulnerabilities using CVSS, EPSS, threat intelligence, and business impact scoring. Collaborate with asset owners to assess exposure and propose remediation options.
• Remediation Coordination: Track remediation efforts and engage with system owners to ensure timely patching or mitigation. Create and manage tickets in platforms such as ServiceNow or Jira. Escalate overdue vulnerabilities according to SLA thresholds. Lead in assessing and driving company-wide response to critical vulnerabilities.
• Monitoring & Reporting: Generate and maintain dashboards and reports on vulnerability trends, exceptions, and KPIs. Contribute to internal and external audits by providing evidence of scanning, remediation, and compliance alignment.
• Process Improvement: Support automation and workflow enhancements for vulnerability intake, assessment, and resolution. Contribute to playbooks, SOPs, and knowledge base documentation.

Your Skills And Expertise

To set you up for success in this role from day one, 3M requires (at a minimum) the following qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or technology field (completed and verified prior to start)
• Two (2) years of experience in vulnerability management, security operations, or IT infrastructure in a private, public, government or military environment

Additional qualifications that could help you succeed even further in this role include:

• Familiarity with common vulnerability management tools (e.g., Tenable, Rapid7, Qualys)
• Understanding of CVSS scoring, patch management processes, and exploitability metrics
• Experience working in large, distributed enterprise or manufacturing environments
• Knowledge of cloud and container vulnerabilities
• Familiarity with regulatory frameworks
• Experience with CMDBs (e.g., ServiceNow), SIEM/SOAR tools, or asset discovery platforms
• Security certifications (Security+, SANS GIAC, OSCP, etc.) are a plus
• Exposure to OT environments is a strong plus

Work location

Onsite in Maplewood, MN

Travel

May include up to 10%

Relocation Assistance

Yes

Pay

The expected compensation range for this position is $164,612 - $201,193, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate's relevant knowledge, training, skills, work location, and/or experience.

Benefits

This position may be eligible for a range of benefits (e.g., Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences and Retirement Benefits, etc.). Additional information is available at: https://www.3m.com/3M/en_US/careers-us/working-at-3m/benefits/.