Security Specialist

Security SpecialistBehind every legend is a flawless foundation. The breach that never happened. That's your best work — and nobody will ever know.DuraServ is looking for a Security Specialist who monitors, analyzes, and protects the enterprise — across Azure environments, endpoints, cloud infrastructure, and regulatory compliance frameworks — with precision that makes the invisible work visible only when it matters most.The best security work is the kind nobody notices.DuraServ operates a national field service organization with hundreds of endpoints, cloud environments, enterprise applications, and team members across nine U.S. and Canadian regions — all of whom depend on a security posture that holds without requiring them to think about it. When the security function works, the business runs. When it doesn't, the consequences reach far beyond IT.As Security Specialist, you own the continuous monitoring, analysis, and improvement of DuraServ's security posture — vulnerability management, threat detection, attack surface visibility, incident response support, endpoint and cloud security operations, data protection, and compliance alignment across NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks. You work within Microsoft Azure, Defender, Sentinel, and Purview ecosystems and serve as the organization's subject matter expert across the security stack.If you're the kind of security professional who finds the vulnerability before the attacker does — and you document it, remediate it, and prevent the next one — this role was built for you.What You'll OwnThreat & Vulnerability ManagementMonitor, analyze, and support remediation of security vulnerabilities across enterprise systems, applications, endpoints, cloud environments, and network infrastructureAssess and prioritize security findings, threats, and control gaps based on business risk, attack exposure, and operational impact — you know what to fix first and whyMonitor and evaluate the organization's attack surface to identify exposed assets, misconfigurations, unauthorized access risks, and security weaknesses before they become incidentsSupport incident response activities including alert triage, threat investigation, escalation, documentation, and coordination with technical teamsCloud & Endpoint SecuritySupport security operations within Microsoft Azure environments — monitoring and administration across Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and related security technologiesAssist with endpoint, OS, and network security initiatives — configuration validation, compliance monitoring, access controls, firewall reviews, and device managementSupport data governance and data security posture management — data classification, labeling, access monitoring, and protection of sensitive informationCompliance & Continuous ImprovementAssist with implementation, validation, and documentation of security controls aligned with NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks — your documentation is audit-ready at all timesMaintain and update security policies, procedures, standards, audit evidence, and compliance tracking records with the rigor those frameworks demandCollaborate with engineering, infrastructure, data, and compliance teams to improve security posture, support secure AI adoption, participate in tabletop exercises, and drive continuous improvementWho You AreYou don't wait for alerts to tell you something is wrong. You're already looking at the logs, reviewing the surface, and asking the question the alert hasn't asked yet.Technically fluent in the Microsoft security stack — Defender, Sentinel, Purview, and Azure security operations are your working environment, not your stretch goalsA threat hunter by instinct — you analyze logs, investigate anomalies, and prioritize remediation with the judgment that comes from experience, not just toolingCompliance-capable — you understand NIST, CMMC, ISO, SOC, CIS, and FedRAMP not as acronyms but as frameworks you've worked within and documented againstA precise documenter — your audit evidence, policies, and incident records are current, complete, and defensible; you don't treat documentation as an afterthoughtA cross-functional collaborator — you work effectively with engineering, infrastructure, data, and compliance teams and communicate security risk to both technical and non-technical audiencesAnalytically disciplined — you assess risk based on business impact, not just CVSS scores; you know the difference between a critical vulnerability in a production environment and one in an isolated test systemWhat We're Looking ForRequired3–6 years of practical experience in information security operations — SOC, IT security, or infrastructure security team experience requiredStrong working knowledge of cybersecurity principles: threat detection, vulnerability management, incident response, SIEM platforms, EDR/XDR solutions, and enterprise security controlsExperience with Microsoft Azure security environments and the Microsoft security technology stack (Defender, Sentinel, Purview, or equivalent)Working knowledge of networking, OS security, identity and access management, endpoint security, and cloud security conceptsAbility to investigate security alerts, analyze logs and attack activity, prioritize remediation, and support containment and recoveryPreferredBachelor's degree in Cybersecurity, Information Technology, or related field; equivalent hands-on experience consideredRelevant industry certifications: CompTIA Security+, Certified Ethical Hacker (CEH), Microsoft Azure security certifications, Microsoft Purview certifications, or comparable credentialsExperience supporting compliance frameworks including NIST, CMMC, ISO, SOC, CIS, or FedRAMPBackground supporting AI security adoption or secure integration of emerging technologies in enterprise environmentsWhat's in It for YouCompetitive compensation commensurate with experienceFull benefits package: medical, dental, vision, and 401K with company matchCompany-provided life insurance, short-term and long-term disabilityA broad and technically substantive security scope — vulnerability management, cloud security, incident response, compliance, and data protection all in one roleA stable, office-based environment at DuraServ Corporate in Coppell, TX with no travel requirementDirect collaboration with engineering, infrastructure, and compliance teams — your work has cross-functional visibility and real organizational impactAn environment investing in AI adoption and emerging technology — you'll help shape how that happens securelyA Note to the Right Candidate.If you've been in a security role where the alerts were noise, the documentation was backlogged, and the compliance frameworks were treated as checkboxes rather than guardrails — this is a different environment.DuraServ is building a security function that operates with rigor — where vulnerabilities get remediated, not deferred; where audit evidence is maintained, not assembled at the last minute; and where the security posture improves continuously because someone owns it.Behind every legend is a flawless foundation. Come help us build ours.APPLY NOW — Security Professionals Wanted.Hit Apply. Tell us what you've monitored, what you've remediated, and what your documentation looks like when an auditor walks in.Please note: This is NOT a remote or hybrid role. This position is based on-site at DuraServ Corporate in Coppell, TX.About DuraServDuraServ is a national leader in commercial dock and door solutions, operating across the U.S. and Canada since 2001. As we grow through acquisition and expand our technology infrastructure, we are building the security posture that protects everything we've built — and we hire people who understand what that responsibility requires.DuraServ is an Equal Opportunity Employer.NOTICE TO EXTERNAL RECRUITING AGENCIES & SEARCH FIRMSDuraServ LLC and its affiliate businesses do not accept unsolicited resumes or candidate profiles from external recruiting/staffing agencies or search firms. Any resume or candidate information submitted to any DuraServ employee — without a fully executed, written search agreement in place with DuraServ's Talent Management team — will be deemed the property of DuraServ LLC. No placement fee will be owed or paid, now or in the future, regardless of whether the candidate is subsequently hired. Agencies seeking to be considered as an authorized vendor must have a current, countersigned agreement with DuraServ LLC prior to submitting any candidates. Agencies should not contact hiring managers, regional leadership, or any other