Security Specialist

For more than 20 years, Solü has been helping talented technologists navigate the rapidly-changing field of information technology. We take pride in working with you to offer a variety of challenging opportunities with forward-thinking clients, spanning all industries. Our employee-centric culture creates a supportive environment for our employees to grow into their full potential.

Employment Requirements
This opportunity is not open to C2C relationships or visa sponsorship.

Job Description
Solu is seeking a Security Specialist to join our team for a fully remote opportunity. The Security Specialist is responsible for planning, implementing, managing, monitoring, and upgrading security measures to protect DRC data, systems, and networks. This role will focus on vulnerability management, network security, endpoint security, Qualys vulnerability scanning and remediation, and SCCM/MECM patch management. The Security Specialist will also be responsible for identifying and remediating security vulnerabilities, maintaining patch compliance, supporting security best practices, and helping ensure the organization’s systems and infrastructure remain secure.

Responsibilities

• Responding to all system and/or network security breaches.
• Design and maintain enterprise SCCM/MECM patching strategies for Windows endpoints and supported server environments.
• Create and manage SCCM device collections deployment groups maintenance windows software update groups and deployment schedules.
• Coordinate vulnerability information from Qualys with SCCM patching data to identify vulnerable systems requiring remediation.
• Perform vulnerability-first remediation by identifying affected assets and determining the appropriate patch configuration change software upgrade or compensating control.
• Analyze patch compliance deployment status failed installations pending reboots missing updates and non-reporting devices.
• Manage Software Update Points SUP WSUS synchronization software update groups deployment packages and Automatic Deployment Rules ADRs.
• Troubleshoot SCCM client installation client health policy retrieval software update scanning deployment evaluation and content download failures.
• Develop procedures for emergency patch deployment when critical or actively exploited vulnerabilities require accelerated remediation.
• Package and deploy third-party application updates and security fixes where Microsoft updates do not provide remediation.
• Create and maintain SCCM operational runbooks patching procedures troubleshooting guides deployment standards and rollback procedures.
• Testing and identifying network and system vulnerabilities.
• Evaluating the organization’s security needs and establishing best practices and standards accordingly.
• Taking appropriate security measures to ensure that DRC’s infrastructure and existing data are kept safe.
• Perform scheduled and ad-hoc vulnerability scans across networks servers and endpoints.
• Work with server endpoint security network and application teams to resolve cross-platform remediation dependencies.
• Tune scans and reduce false positives to improve data accuracy.
• Develop vulnerability metrics dashboards and executive-level reports.
• Conducting testing and scans to identify any vulnerabilities in the network and system.

Qualifications

• Required, 10 Years Network Security and threat detection, incident response and vulnerability management.
• Required, 10 Years Hands-on experience administering Qualys, remediation documentation and patch management processes.
• Required, 10 Years Microsoft SCCM/MECM administration.
• Highly desired Experience with Vulnerability scan reports and remediation tracking, risk assessment and compliance documentation.

* Solü Technology Partners provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability or genetics.

Functional Functional Always active The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the…