Seeking a detail-oriented Security Hardening & Misconfiguration Remediation Specialist to enhance security configurations across enterprise environments. This role focuses on identifying, analyzing, and fixing system misconfigurations with minimal business impact, collaborating with application owners, infrastructure teams, and clients to elevate the overall security posture in line with industry best practices.

Analyze and address security misconfigurations in servers, endpoints, and infrastructure. Lead remediation efforts alongside infrastructure and application teams, carefully evaluating business impact before changes. Understand application dependencies and document exceptions with proper justification. Support vulnerability management, interpret security baselines (NIST, CIS Benchmarks), and remediate insecure configurations.

Ensure Role-Based Access Control (RBAC) adheres to least privilege principles. Present remediation plans to the Change Advisory Board (CAB) and manage change implementation via ITSM tools like ServiceNow. Communicate risk and remediation timelines clearly to clients and stakeholders. Perform Windows OS security configuration reviews, implement hardening controls, and validate registry changes. Use Windows commands and scripts for configuration analysis, identifying insecure services and permissions.

A minimum of 2 to 5 years of experience in Security Hardening, Configuration Management, or Security Operations is essential. Prior experience within enterprise environments, including familiarity with structured change management processes, is preferred. Experience with vulnerability management processes and knowledge of the vulnerability lifecycle are considered advantageous.