Remediation Engineer, End User Security Vulnerability - Baltimore City Office of Information and Technology at City of Baltimore

Job description

Salary Range: $83,530.00 - $133,471.00 Annually Get to Know Us Welcome to the City of Baltimore! Experience the reward of a fulfilling career and enjoy the added element of excitement in a vibrant, diverse atmosphere. The City of Baltimore offers limitless opportunities to help drive social impact, both on the job and in the community, while serving its citizens. Join us in making Baltimore a great place to live and work. In the City of Baltimore, we hire great people and provide them with the skills and opportunities to grow toward their career aspirations. If you are looking for a career change or interested in learning more, explore our opportunities and benefits programs. We are excited to have you as a part of the City of Baltimore Team! The city offers medical, prescription drug, dental, vision, optional life, AD&D, and FSA plans. This office also supplies wellness programs, support groups, and workshops. You can learn about our benefits here : https://humanresources.baltimorecity.gov/hr-divisions/benefits Job Summary: This position will primarily focus on prioritizing, remediating, and validating security vulnerabilities affecting end user computing devices, operating systems, browsers, applications, and related endpoint technologies. The position will also serve as backup to the systems engineering vulnerability team. The position will be responsible for reducing legacy vulnerability backlog and continuously addressing newly identified vulnerabilities that occur across the environment on a regular basis. The position is primarily responsible for identifying, coordinating, and remediating security vulnerabilities across end-user computing environments, while also providing backup support for Systems. The role manages the full vulnerability remediation lifecycle from reviewing findings and deploying patches to troubleshooting failed deployments and validating that vulnerabilities have been successfully resolved without disrupting business operations. Key responsibilities include using tools such as Intune, SCCM, and custom scripting to deploy operating system, application, browser, and security updates; creating and testing remediation packages and scripts; addressing unsupported or end-of-life software; and developing remediation plans for complex or recurring vulnerabilities. The position also maintains detailed documentation, analyzes vulnerability trends and root causes, recommends improvements to endpoint security and lifecycle management, and may serve as a technical lead or escalation resource. On-call and after-hours support is also required. MINIMUM QUALIFICATIONS On or before the date of filing the application, each candidate must: EDUCATION: Have a Bachelor of Science degree from an accredited college or university. AND EXPERIENCE: Have two years of related specialty IT experience (for example, but not limited to: system engineering, network engineering, information security, application programming, systems design, hierarchical/relational database management, GIS experience, custom report writing, or developing and supporting cloud-based software integration) . Excellent verbal and written communication skills. Previous IT work lead experience is preferred. Previous IT experience in government is preferred . OR NOTES EQUIVALENCIES: Have an equivalent combination of education and experience. Advanced technical credentials may be substituted for six months of experience or education. Multiple certifications may receive additional credit towards education/experience. AND LICENSES, REGISTRATIONS AND CERTIFICATES: Advanced technical credentials, e.g., Project Management Professional (PMP), Certified Information Security Manager (CISM), preferred. **PREFERRED QUALIFICATIONS Bachelor of Science degree. Two years of related specialty IT experience (for example, but not limited to: system engineering, endpoint engineering, network engineering, information security, vulnerability management, application packaging, syst