IT Security Analyst 3

Location: Richmond, VA
Work Arrangement: Hybrid On-site Tuesday, Wednesday, and Thursday (3 days per week)
Interview Process: Webcam Interview Only

Job Description
client is seeking an experienced Endpoint Engineer specializing in enterprise software deployment, patch management, and endpoint security. The selected candidate will support enterprise endpoint environments by packaging and deploying commercial off-the-shelf (COTS) software, managing OS and third-party patches, reviewing vulnerability reports, and remediating endpoint security risks.

The ideal candidate will have hands-on experience with Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), endpoint management tools, vulnerability assessment platforms, and deployment automation.

Key Responsibilities
Engineer, package, configure, test, and deploy commercial off-the-shelf (COTS) software across enterprise endpoint environments.
Develop and maintain software deployment packages using Microsoft Intune, MECM/SCCM, or similar endpoint management platforms.
Perform application compatibility testing and troubleshoot software installation and configuration issues.
Automate software packaging and deployment workflows to improve efficiency and consistency.
Collaborate with application owners and security teams to assess software updates, dependencies, and deployment risks.
Manage enterprise patch deployment activities, including testing, scheduling, implementation, and validation of operating system and third-party patches.
Review vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Microsoft Defender for Endpoint.
Prioritize and remediate endpoint vulnerabilities in accordance with security requirements.
Troubleshoot deployment failures, patching issues, and endpoint configuration problems, performing root-cause analysis and implementing corrective actions.
Maintain documentation for software packaging standards, deployment procedures, endpoint configuration baselines, and change management.
Implement and maintain endpoint hardening policies, security compliance settings, and configuration baselines.
Collaborate with infrastructure, cybersecurity, and service desk teams to maintain endpoint reliability and security.
Identify opportunities to improve endpoint management processes through automation and emerging technologies.

Required Technical Skills
Microsoft Intune
Microsoft Endpoint Configuration Manager (MECM/SCCM)
Enterprise software packaging and deployment
Windows OS and third-party patch management
Endpoint vulnerability remediation
Vulnerability assessment tools such as Rapid7, Qualys, or Tenable
Microsoft Defender for Endpoint
Deployment troubleshooting and root-cause analysis
PowerShell scripting and deployment automation
Endpoint security hardening and configuration management
Change management and technical documentation