MO812-Security Specialist (809183).

Torrey Holistics; Columbus (OH); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Torrey Holistics is seeking a Security Specialist for a 10-month contract to enhance network security, threat detection, incident response and vulnerability management. The role focuses on hands-on Qualys and SCCM/MECM operations across remote environments and the Columbus, OH region.

You will coordinate patching with Qualys, manage WSUS and ADRs, and develop remediation workflows, risk assessments, and compliance documentation.

Qualifications

• Hands-on experience administering Qualys, remediation documentation and patch management processes.
• Experience with vulnerability scan reports and remediation tracking, risk assessment and compliance documentation.
• Planning, implementing, managing, monitoring, and upgrading security measures for the protection of DRC data, systems, and networks.
• Responding to all system and/or network security breaches.
• Tested and maintained patching strategies for Windows endpoints and servers.

Responsibilities

• Responding to all system and/or network security breaches.
• Design and maintain enterprise SCCM/MECM patching strategies for Windows endpoints and servers.
• Coordinate vulnerability information from Qualys with SCCM patching data to identify vulnerable systems needing remediation.
• Perform vulnerability-first remediation by identifying affected assets and applying patches or mitigations.
• Develop runbooks, patching procedures, and rollback standards.
• Conduct vulnerability scans and assist cross-team remediation.

Skills

Qualys

SCCM/MECM

Vulnerability management

Incident response

Patch management

Threat detection

Tools

WSUS

ADR

Group Policy

SCCM patches deployment

Job description

100% RemoteOur direct client has an opening for a Security Specialist (809183). This contract is 10 months to start.Client is in Columbus, OHNetwork Security and threat detection, incident response and vulnerability management Required 10 YearsHands-on experience administering Qualys, remediation documentation and patch management processes Required 10 YearsMicrosoft SCCM/MECM administration. Required 10 YearsExperience with Vulnerability scan reports and remediation tracking, risk assessment and compliance documentation Highly desiredPlanning, implementing, managing, monitoring, and upgrading security measures for the protection of DRC data, systems, and networks· Responding to all system and/or network security breaches· Design and maintain enterprise SCCM/MECM patching strategies for Windows endpoints and supported server environments.· Create and manage SCCM device collections, deployment groups, maintenance windows, software update groups, and deployment schedules.· Coordinate vulnerability information from Qualys with SCCM patching data to identify vulnerable systems requiring remediation.· Perform vulnerability-first remediation by identifying affected assets and determining the appropriate patch, configuration change, software upgrade, or compensating control.· Analyze patch compliance, deployment status, failed installations, pending reboots, missing updates, and non-reporting devices.· Manage Software Update Points (SUP), WSUS synchronization, software update groups, deployment packages, and Automatic Deployment Rules (ADRs).· Troubleshoot SCCM client installation, client health, policy retrieval, software update scanning, deployment evaluation, and content download failures.· Develop procedures for emergency patch deployment when critical or actively exploited vulnerabilities require accelerated remediation.· Package and deploy third-party application updates and security fixes where Microsoft updates do not provide remediation.· Create and maintain SCCM operational runbooks, patching procedures, troubleshooting guides, deployment standards, and rollback procedures.· Testing and identifying network and system vulnerabilities· Evaluating the organization’s security needs and establishing best practices and standards accordingly· Taking appropriate security measures to ensure that DRC’s infrastructure and existing data are kept safe· Perform scheduled and ad-hoc vulnerability scans across networks, servers and endpoints.· Work with server, endpoint, security, network, and application teams to resolve cross-platform remediation dependencies.· Tune scans and reduce false positives to improve data accuracy· Develop vulnerability metrics, dashboards, and executive-level reports· Conducting testing and scans to identify any vulnerabilities in the network and system