Infrastructure Security Analyst, SCCM, Hybrid

Infrastructure Security Analyst, SCCM, Vulnerability, Patch management, Qualys/Nessus

Our client, a leading private sector business based in Bristol, is looking to hire contractor with a background in infrastructure and related security.

The successful candidate will be responsible for ensuring security and integrity for our clients IT infrastructure, taking responsibility for patching and vulnerability remediation for both physical and virtual environments. This will include proactive identification, assessment, and mitigation of security vulnerabilities across Windows servers, legacy applications and cloud environments.

Hybrid working - 3/2-day split.
Engagement is via umbrella company only.

General responsibilities:

• Deploy patches to Windows servers to address vulnerabilities, ensuring compliance with security policies.
• Manage patching windows and downtime coordination with various business units to minimize disruption during updates.
• Monitor patch management systems to ensure all systems are up to date and protected from security threats.
• Server hardening to Windows systems, both physical and virtual.
• Maintain accurate documentation of remediation activities
• Assist in incident response by applying emergency patches and remediations
• Contribute to disaster recovery and business continuity plans

Skills and experience required: -

• Windows server including patching processes
• Server/security hardening.
• Vulnerability management tools e.g. Nessus, Qualys, for conducting vulnerability assessments
• Hands-on experience in patch management systems - SCCM, WSUS, or Azure Update Management - for deploying patches in both on-premises and cloud
• Proficiency in cloud security
• Experience with security frameworks and best practices for ensuring compliance in patching and vulnerability management.