Vulnerability System Engineer

Vulnerability System Engineer

Virginia Beach, VA

Vulnerability: This role performs the function of a system engineer level II that will support the city s cybersecurity, end user computing and core engineering teams. This role will directly work with the city s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office and related ancillary software. The SE II role will primarily be responsible for working with the vulnerability management system and system engineer I to remediate identified vulnerabilities, develop deployment objects, deploy remediations and correct any existing vulnerability deployment objects. The role will work with the city s cybersecurity team to develop communications and follow city requirements with regards to change management.

Job Responsibilities and Required Skills:

• Work with the City s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
• Develop Active Directory group policies, automations, scripts, deployment packages and/or customized installers to remediate vulnerabilities.
• Assist in the identification and research of remediation configurations for identified vulnerabilities.
• Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
• Knowledge of principles of cybersecurity best practices and concepts.
• Experience with database, network, virtualization and OT operations, concepts, and design.
• Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
• Experience with client management platforms i.e. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
• Experience with PowerShell, VBScript, and/batch scripting.
• Experience working with Microsoft Active Directory and Active Directory Group Policies
• Experience working with Microsoft Entra.
• Experience with security architecture and security best practices for AWS, Azure, Google Cloud and/or other public cloud platforms.