Reducing Security Debt with a Remediation First Approach