> Markdown version of [/jobs/ext/2549066-it-security-analyst-vulnerability-management-engineer](https://www.wearedevelopers.com/jobs/ext/2549066-it-security-analyst-vulnerability-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Analyst / Vulnerability Management Engineer - **Company:** Inc. (dsi) - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Cyber Security, Intrusion Detection and Prevention, Network Security, System Center Configuration Manager, Software Vulnerability Management, Patch Management, Wsus, Qualys, Server Operating Systems & Platforms, Vulnerability Analysis - **Published:** August 11, 2026 - **Apply:** https://www.dice.com/job-detail/927bceb4-41cd-4051-b274-00afe7341dce ## About the Role * 10 years of experience in network security, threat detection, incident response, and vulnerability management required. * 10 years of hands-on experience administering Qualys, remediation documentation, and patch management processes required. * 10 years of Microsoft SCCM/MECM administration experience required. * Experience with vulnerability scan reports and remediation tracking, risk assessment, and compliance documentation highly desired. ## Description Diversified Systems is searching for an IT Security Analyst / Vulnerability Management Engineer responsible for planning, implementing, managing, monitoring, and upgrading security measures for the protection of data, systems, and networks. The consultant will support vulnerability management, patch management, SCCM/MECM administration, security operations, remediation efforts, and enterprise security initiatives., * Plan, implement, manage, monitor, and upgrade security measures for the protection of data, systems, and networks. * Respond to all system and/or network security breaches. * Design and maintain enterprise SCCM/MECM patching strategies for Windows endpoints and supported server environments. * Create and manage SCCM device collections, deployment groups, maintenance windows, software update groups, and deployment schedules. * Coordinate vulnerability information from Qualys with SCCM patching data to identify vulnerable systems requiring remediation. * Perform vulnerability-first remediation by identifying affected assets and determining the appropriate patch, configuration change, software upgrade, or compensating control. * Analyze patch compliance, deployment status, failed installations, pending reboots, missing updates, and non-reporting devices. * Manage Software Update Points (SUP), WSUS synchronization, software update groups, deployment packages, and Automatic Deployment Rules (ADRs). * Troubleshoot SCCM client installation, client health, policy retrieval, software update scanning, deployment evaluation, and content download failures. * Develop procedures for emergency patch deployment when critical or actively exploited vulnerabilities require accelerated remediation. * Package and deploy third-party application updates and security fixes where Microsoft updates do not provide remediation. * Create and maintain SCCM operational runbooks, patching procedures, troubleshooting guides, deployment standards, and rollback procedures. * Perform testing and identify network and system vulnerabilities. * Evaluate the organization''s security needs and establish best practices and standards accordingly. * Take appropriate security measures to ensure that infrastructure and existing data are kept safe. * Perform scheduled and ad-hoc vulnerability scans across networks, servers, and endpoints. * Work with server, endpoint, security, network, and application teams to resolve cross-platform remediation dependencies. * Tune scans and reduce false positives to improve data accuracy. * Develop vulnerability metrics, dashboards, and executive-level reports. * Conduct testing and scans to identify vulnerabilities in the network and system. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)