Remediation Engineer, End User Security Vulnerability - Baltimore City Office of Information and Technology

Baltimore City•City of Syracuse, NY

1d•$83,530 - $133,471•Onsite

About The Position

This position will primarily focus on prioritizing, remediating, and validating security vulnerabilities affecting end user computing devices, operating systems, browsers, applications, and related endpoint technologies. The position will also serve as backup to the systems engineering vulnerability team. The position will be responsible for reducing legacy vulnerability backlog and continuously addressing newly identified vulnerabilities that occur across the environment on a regular basis. The position is primarily responsible for identifying, coordinating, and remediating security vulnerabilities across end-user computing environments, while also providing backup support for Systems. The role manages the full vulnerability remediation lifecycle from reviewing findings and deploying patches to troubleshooting failed deployments and validating that vulnerabilities have been successfully resolved without disrupting business operations. Key responsibilities include using tools such as Intune, SCCM, and custom scripting to deploy operating system, application, browser, and security updates; creating and testing remediation packages and scripts; addressing unsupported or end-of-life software; and developing remediation plans for complex or recurring vulnerabilities. The position also maintains detailed documentation, analyzes vulnerability trends and root causes, recommends improvements to endpoint security and lifecycle management, and may serve as a technical lead or escalation resource. On-call and after-hours support is also required.

Requirements

Bachelor of Science degree from an accredited college or university.
Two years of related specialty IT experience (for example, but not limited to: system engineering, network engineering, information security, application programming, systems design, hierarchical/relational database management, GIS experience, custom report writing, or developing and supporting cloud-based software integration).
Excellent verbal and written communication skills.
Advanced technical credentials, e.g., Project Management Professional (PMP), Certified Information Security Manager (CISM), preferred.
Knowledge of the installation, maintenance, and enhancement of microcomputer systems and mainframe client servers.
Knowledge of the interrelationship of systems analysis, computer programming, and information technology operations.
Knowledge of current trends and developments in network-based communications systems.
Knowledge of computer-based communications protocols.
Knowledge of security groups and roles and assignment of those roles.
Skill in developing database queries and generating reports.
Skill in installing, repairing, and troubleshooting network programs, hardware, and systems.
Ability to analyze, apply logic and solve technology problems.
Ability to establish and maintain effective working relationships with vendors, management, technical co-workers and support specialists, and system users.
Ability to design complex systems consisting of a wide variety of programs, procedures, and forms.
Ability to schedule and perform preventative and corrective maintenance procedures and repairs.
Ability to write detailed technical reports and analyses.
Ability to develop a working knowledge of computer systems software and operating systems.
Ability to develop systems software and systems software testing procedures.

Nice To Haves

Previous IT work lead experience is preferred.
Previous IT experience in government is preferred.
Advanced technical credentials may be substituted for six months of experience or education.
Multiple certifications may receive additional credit towards education/experience.
Two years of related specialty IT experience (for example, but not limited to: system engineering, endpoint engineering, network engineering, information security, vulnerability management, application packaging, systems design, or developing and supporting cloud-based software integrations).
Two years' experience with enterprise endpoint management, patch deployment, software deployment, or vulnerability remediation is strongly preferred.
Skill in cartographic map design, accuracy of presentation with required map components and elements, layout and design.

Responsibilities

Prioritizing, remediating, and validating security vulnerabilities affecting end user computing devices, operating systems, browsers, applications, and related endpoint technologies.
Serving as backup to the systems engineering vulnerability team.
Reducing legacy vulnerability backlog and continuously addressing newly identified vulnerabilities.
Identifying, coordinating, and remediating security vulnerabilities across end-user computing environments.
Providing backup support for Systems.
Managing the full vulnerability remediation lifecycle from reviewing findings and deploying patches to troubleshooting failed deployments and validating that vulnerabilities have been successfully resolved without disrupting business operations.
Using tools such as Intune, SCCM, and custom scripting to deploy operating system, application, browser, and security updates.
Creating and testing remediation packages and scripts.
Addressing unsupported or end-of-life software.
Developing remediation plans for complex or recurring vulnerabilities.
Maintaining detailed documentation.
Analyzing vulnerability trends and root causes.
Recommending improvements to endpoint security and lifecycle management.
Serving as a technical lead or escalation resource.
Providing on-call and after-hours support.