IT Security Analyst / Vulnerability Management Engineer
Remote Description:
Diversified Systems is searching for an IT Security Analyst / Vulnerability Management Engineer responsible for planning, implementing, managing, monitoring, and upgrading security measures for the protection of data, systems, and networks. The consultant will support vulnerability management, patch management, SCCM/MECM administration, security operations, remediation efforts, and enterprise security initiatives.
Responsibilities:
- Plan, implement, manage, monitor, and upgrade security measures for the protection of data, systems, and networks.
- Respond to all system and/or network security breaches.
- Design and maintain enterprise SCCM/MECM patching strategies for Windows endpoints and supported server environments.
- Create and manage SCCM device collections, deployment groups, maintenance windows, software update groups, and deployment schedules.
- Coordinate vulnerability information from Qualys with SCCM patching data to identify vulnerable systems requiring remediation.
- Perform vulnerability-first remediation by identifying affected assets and determining the appropriate patch, configuration change, software upgrade, or compensating control.
- Analyze patch compliance, deployment status, failed installations, pending reboots, missing updates, and non-reporting devices.
- Manage Software Update Points (SUP), WSUS synchronization, software update groups, deployment packages, and Automatic Deployment Rules (ADRs).
- Troubleshoot SCCM client installation, client health, policy retrieval, software update scanning, deployment evaluation, and content download failures.
- Develop procedures for emergency patch deployment when critical or actively exploited vulnerabilities require accelerated remediation.
- Package and deploy third-party application updates and security fixes where Microsoft updates do not provide remediation.
- Create and maintain SCCM operational runbooks, patching procedures, troubleshooting guides, deployment standards, and rollback procedures.
- Perform testing and identify network and system vulnerabilities.
- Evaluate the organization''s security needs and establish best practices and standards accordingly.
- Take appropriate security measures to ensure that infrastructure and existing data are kept safe.
- Perform scheduled and ad-hoc vulnerability scans across networks, servers, and endpoints.
- Work with server, endpoint, security, network, and application teams to resolve cross-platform remediation dependencies.
- Tune scans and reduce false positives to improve data accuracy.
- Develop vulnerability metrics, dashboards, and executive-level reports.
- Conduct testing and scans to identify vulnerabilities in the network and system.
Requirements:
- 10 years of experience in network security, threat detection, incident response, and vulnerability management required.
- 10 years of hands-on experience administering Qualys, remediation documentation, and patch management processes required.
- 10 years of Microsoft SCCM/MECM administration experience required.
- Experience with vulnerability scan reports and remediation tracking, risk assessment, and compliance documentation highly desired.
About Diversified Systems
Founded in 1990, Diversified Systems is an award-winning Technology Services corporation providing all levels of IT project consulting services nationwide. DSI is headquartered in Columbus, Ohio with regional offices in the American Midwest and East Coast. We offer our consultants a number of flexible and competitive compensation benefit packages.
Diversified Systems is committed to the principles of equal employment. We are committed to complying with all federal, state, and local laws providing equal employment opportunities, and all other employment laws and regulations.
Diversity, Equity and Inclusion
DSI values authenticity and is committed to making sure our employees and partners are valued and respected. At DSI, we believe building a diverse culture is important because we know when people work together, we can achieve better results as a team. DSI realizes that everyone comes from various backgrounds. We celebrate these differences because our employees are our greatest asset as we strive to best meet the needs of those we serve. As part of our ongoing efforts, DSI is focused on advancing equality, diversity, and inclusion by setting high standards to continually evolve our culture. This includes but is not limited to recruiting, community involvement, client delivery, and career development.