Security Specialist

BEHIND EVERY LEGEND IS A FLAWLESS FOUNDATION.

THE BREACH THAT NEVER HAPPENED.

That's your best work — and nobody will ever know.

Dura Serv is looking for a Security Specialist who monitors, analyzes, and protects the enterprise — across Azure environments, endpoints, cloud infrastructure, and regulatory compliance frameworks — with precision that makes the invisible work visible only when it matters most.

Coppell, TX (On-Site)

The Best Security Work Is the Kind Nobody Notices.

Dura Serv operates a national field service organization with hundreds of endpoints, cloud environments, enterprise applications, and team members across nine U.S. and Canadian regions — all of whom depend on a security posture that holds without requiring them to think about it. When the security function works, the business runs. When it doesn't, the consequences reach far beyond IT.

As Security Specialist, you own the continuous monitoring, analysis, and improvement of Dura Serv's security posture — vulnerability management, threat detection, attack surface visibility, incident response support, endpoint and cloud security operations, data protection, and compliance alignment across NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks. You work within Microsoft Azure, Defender, Sentinel, and Purview ecosystems and serve as the organization's subject matter expert across the security stack.

If you're the kind of security professional who finds the vulnerability before the attacker does — and you document it, remediate it, and prevents the next one — this role was built for you.

• Monitor, analyze, and support remediation of security vulnerabilities across enterprise systems, applications, endpoints, cloud environments, and network infrastructure
• Assess and prioritize security findings, threats, and control gaps based on business risk, attack exposure, and operational impact — you know what to fix first and why
• Monitor and evaluate the organization's attack surface to identify exposed assets, misconfigurations, unauthorized access risks, and security weaknesses before they become incidents
• Support incident response activities including alert triage, threat investigation, escalation, documentation, and coordination with technical teams

• Support security operations within Microsoft Azure environments — monitoring and administration across Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and related security technologies
• Assist with endpoint, OS, and network security initiatives — configuration validation, compliance monitoring, access controls, firewall reviews, and device management
• Support data governance and data security posture management — data classification, labeling, access monitoring, and protection of sensitive information

• Assist with implementation, validation, and documentation of security controls aligned with NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks — your documentation is audit-ready at all times
• Maintain and update security policies, procedures, standards, audit evidence, and compliance tracking records with the rigor those frameworks demand
• Collaborate with engineering, infrastructure, data, and compliance teams to improve security posture, support secure AI adoption, participate in tabletop exercises, and drive continuous improvement

You don't wait for alerts to tell you something is wrong. You're already looking at the logs, reviewing the surface, and asking the question the alert hasn't asked yet.

• Technically fluent in the Microsoft security stack — Defender, Sentinel, Purview, and Azure security operations are your working environment, not your stretch goals
• A threat hunter by instinct — you analyze logs, investigate anomalies, and prioritize remediation with the judgment that comes from experience, not just tooling
• Compliance-capable — you understand NIST, CMMC, ISO, SOC, CIS, and FedRAMP not as acronyms but as frameworks you've worked within and documented against
• A precise documenter — your audit evidence, policies, and incident records are current, complete, and defensible; you don't…