IT Security Specialist

The DRC-IT Security Specialist 2 (ITSS2) is responsible for planning, implementing, managing, and monitoring security measures to protect DRC's data, systems, and networks. This role involves vulnerability management, patching strategies, incident response, and collaboration with cross-functional teams to ensure robust security posture. The position is full-time and remote, requiring expertise in SCCM/MECM and vulnerability assessment tools. Responsibilities:

• Plan, implement, and upgrade security measures for DRC's IT infrastructure.
• Respond to system and network security breaches promptly.
• Design and maintain enterprise SCCM/MECM patching strategies for Windows endpoints and servers.
• Create and manage SCCM device collections, deployment groups, maintenance windows, and update schedules.
• Coordinate vulnerability data from Qualys with SCCM patching to identify and remediate vulnerable systems.
• Perform vulnerability-first remediation through patching, configuration changes, or software upgrades.
• Analyze patch compliance, deployment status, and troubleshoot SCCM client issues.
• Manage Software Update Points, WSUS synchronization, update groups, deployment packages, and Automatic Deployment Rules.
• Develop procedures for emergency patch deployment for critical vulnerabilities.
• Package and deploy third-party software updates and security fixes as needed.
• Create and maintain operational runbooks, patching procedures, troubleshooting guides, and rollback processes.
• Conduct scheduled and ad-hoc vulnerability scans across networks, servers, and endpoints.
• Collaborate with server, endpoint, security, network, and application teams to resolve remediation dependencies.
• Tune vulnerability scans to reduce false positives and improve accuracy.
• Develop vulnerability metrics, dashboards, and executive-level security reports.
• Test and identify network and system vulnerabilities and establish security best practices.

• Minimum 10 years of experience in network security, threat detection, incident response, and vulnerability management.
• Minimum 10 years hands-on experience administering Qualys vulnerability management tools and patch management processes.
• Minimum 10 years experience with Microsoft SCCM/MECM administration.
• Strong knowledge of vulnerability scan reports, remediation tracking, risk assessment, and compliance documentation.

• Experience in developing security metrics, dashboards, and executive reporting.
• Familiarity with cross-platform remediation coordination and false positive tuning in vulnerability scanning.

• Government equipment must not be taken or used outside of the United States under any circumstances.
• Candidate must accept the position within 48 hours of vendor notification.
• All compliance requirements must be completed within 5 business days after position acceptance.
• Selected candidate is required to undergo a fingerprint check.

• Full-time remote position.
• Work schedule details to be coordinated as per organizational needs.