Security Specialist

DuraServ Corp•Coppell, TX

3h•Onsite

About The Position

DuraServ is seeking a Security Specialist to monitor, analyze, and protect the enterprise across Azure environments, endpoints, cloud infrastructure, and regulatory compliance frameworks. This role involves continuous monitoring, analysis, and improvement of the company's security posture, including vulnerability management, threat detection, attack surface visibility, incident response support, endpoint and cloud security operations, data protection, and compliance alignment with frameworks such as NIST, CMMC, ISO, SOC, CIS, and FedRAMP. The specialist will work within the Microsoft Azure, Defender, Sentinel, and Purview ecosystems and serve as the organization's subject matter expert across the security stack. The ideal candidate is proactive in identifying and remediating vulnerabilities before they can be exploited.

Requirements

3–6 years of practical experience in information security operations (SOC, IT security, or infrastructure security team experience required).
Strong working knowledge of cybersecurity principles: threat detection, vulnerability management, incident response, SIEM platforms, EDR/XDR solutions, and enterprise security controls.
Experience with Microsoft Azure security environments and the Microsoft security technology stack (Defender, Sentinel, Purview, or equivalent).
Working knowledge of networking, OS security, identity and access management, endpoint security, and cloud security concepts.
Ability to investigate security alerts, analyze logs and attack activity, prioritize remediation, and support containment and recovery.
Technically fluent in the Microsoft security stack — Defender, Sentinel, Purview, and Azure security operations.
A threat hunter by instinct — analyze logs, investigate anomalies, and prioritize remediation with judgment from experience.
Compliance-capable — understand NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks.
A precise documenter — audit evidence, policies, and incident records are current, complete, and defensible.
A cross-functional collaborator — work effectively with engineering, infrastructure, data, and compliance teams and communicate security risk to both technical and non-technical audiences.
Analytically disciplined — assess risk based on business impact, not just CVSS scores.

Nice To Haves

Bachelor's degree in Cybersecurity, Information Technology, or related field; equivalent hands-on experience considered.
Relevant industry certifications: CompTIA Security+, Certified Ethical Hacker (CEH), Microsoft Azure security certifications, Microsoft Purview certifications, or comparable credentials.
Experience supporting compliance frameworks including NIST, CMMC, ISO, SOC, CIS, or FedRAMP.
Background supporting AI security adoption or secure integration of emerging technologies in enterprise environments.

Responsibilities

Monitor, analyze, and support remediation of security vulnerabilities across enterprise systems, applications, endpoints, cloud environments, and network infrastructure.
Assess and prioritize security findings, threats, and control gaps based on business risk, attack exposure, and operational impact.
Monitor and evaluate the organization's attack surface to identify exposed assets, misconfigurations, unauthorized access risks, and security weaknesses.
Support incident response activities including alert triage, threat investigation, escalation, documentation, and coordination with technical teams.
Support security operations within Microsoft Azure environments, monitoring and administration across Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and related security technologies.
Assist with endpoint, OS, and network security initiatives, including configuration validation, compliance monitoring, access controls, firewall reviews, and device management.
Support data governance and data security posture management, including data classification, labeling, access monitoring, and protection of sensitive information.
Assist with implementation, validation, and documentation of security controls aligned with NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks.
Maintain and update security policies, procedures, standards, audit evidence, and compliance tracking records.
Collaborate with engineering, infrastructure, data, and compliance teams to improve security posture, support secure AI adoption, participate in tabletop exercises, and drive continuous improvement.