Security Analyst

Position Details:

• Job Title: IT Security Specialist
• Location: Columbus, OH
• Work Arrangement: 100% Remote
• Interview: Microsoft Teams

Job Responsibilities:

• Plan, implement, manage, monitor, and upgrade security measures to protect DRC data, systems, and networks.
• Respond to system and network security breaches and support security incident remediation.
• Design and maintain enterprise SCCM/MECM patching strategies for Windows endpoints and supported server environments.
• Create and manage SCCM device collections, deployment groups, maintenance windows, software update groups, and deployment schedules.
• Coordinate Qualys vulnerability information with SCCM patching data to identify systems requiring remediation.
• Perform vulnerability-first remediation by determining the appropriate patch, configuration change, software upgrade, or compensating control.
• Analyze patch compliance, deployment status, failed installations, pending reboots, missing updates, and non-reporting devices.
• Manage Software Update Points (SUP), WSUS synchronization, Software Update Groups, deployment packages, and Automatic Deployment Rules (ADRs).
• Troubleshoot SCCM client installation, client health, policy retrieval, software update scanning, deployment evaluation, and content download issues.
• Develop emergency patch deployment procedures for critical or actively exploited vulnerabilities.
• Package and deploy third-party application updates and security fixes when Microsoft updates do not provide remediation.
• Create and maintain SCCM operational runbooks, patching procedures, troubleshooting guides, deployment standards, and rollback procedures.
• Perform scheduled and ad-hoc vulnerability scans across networks, servers, and endpoints.
• Test and identify network and system vulnerabilities and recommend appropriate remediation.
• Evaluate organizational security requirements and establish security best practices and standards.
• Implement appropriate security measures to protect infrastructure and existing data.
• Work with server, endpoint, security, network, and application teams to resolve cross-platform remediation dependencies.
• Tune vulnerability scans and reduce false positives to improve scan accuracy and reporting.
• Develop vulnerability metrics, dashboards, and executive-level security reports.

#SKILL MATRIX:

• Network Security and threat detection, incident response, and vulnerability management
• Hands-on experience administering Qualys, remediation documentation and patch management processes
• Microsoft SCCM/MECM administration.
• Experience with Vulnerability scan reports and remediation tracking, risk assessment, and compliance documentation