<p><strong>Location/Schedule:</strong> Remote (California-based candidates only) • Long-term contract • Daily 9:00 AM standups • After-hours availability required for critical remediation</p><p><strong>Overview</strong></p><p>A growing organization is hiring an IT Compliance Vulnerability Engineer for a long-term contract engagement. This hands-on systems administration role focuses on remediating vulnerabilities against strict SLAs and documenting fixes as audit evidence, following the organization's recent SOC 2 certification and ongoing alignment to NIST controls. You'll join a small infrastructure team (3 systems administrators, 2 database administrators) supporting a hybrid Azure and on-premise datacenter environment.</p><p><strong>Responsibilities</strong></p><ul><li>Analyze vulnerability scan results (Tenable/Nessus) across servers, endpoints, and infrastructure; remediate findings hands-on</li><li>Meet SLA-driven remediation timelines: Critical–24 hrs, High–7 days, Medium–30 days, Low–60 days, Internal systems–5 days</li><li>Automate remediation at scale using PowerShell</li><li>Track all work in ServiceNow to support SOC 2 evidence collection and audit readiness</li><li>Partner with system/application owners to drive vulnerabilities to a fix or documented exception</li><li>Present to and participate in the Change Advisory Board (CAB) for patching, hardening, and baseline changes</li><li>Support patch management: deployment, testing, change control adherence</li><li>Implement/maintain secure configuration baselines (CIS Benchmarks, Microsoft Security Baselines, or DISA STIGs)</li><li>Administer endpoint management/EDR tooling: SentinelOne, Intune, Group Policy</li><li>Maintain technical documentation, standards, and remediation procedures</li><li>Develop operational metrics and compliance reporting for leadership and auditors</li></ul><p><strong>Required Qualifications</strong></p><ul><li>3+ years in systems administration, cybersecurity operations, vulnerability management, endpoint management, or related field</li><li>Strong Windows Server and Windows endpoint administration</li><li>PowerShell automation for remediation tasks (preferred method)</li><li>Group Policy administration and registry-level configuration/remediation</li><li>Hands-on vulnerability remediation experience — able to speak to specific fixes executed</li><li>Experience with a vulnerability scanner (Tenable or Nessus)</li><li>Endpoint management/EDR experience with SentinelOne and Microsoft Intune</li><li>Ticket-based documentation discipline (ServiceNow or comparable)</li><li>Experience presenting to a CAB or participating in formal change management</li><li>Working familiarity with Azure environments</li><li>Strong grasp of cybersecurity principles and system hardening standards</li><li>Ability to prioritize competing workloads under deadline pressure</li><li>Availability for after-hours remediation work as needed</li></ul><p><strong>Preferred Qualifications</strong></p><ul><li>Automox or comparable enterprise patching platform</li><li>Sprinto or another continuous compliance/evidence platform</li><li>Microsoft Defender for Cloud</li><li>Light Linux administration (environment is predominantly Windows)</li><li>AWS exposure alongside Azure</li><li>Experience with CIS Benchmarks, Microsoft Security Baselines, or DISA STIGs implementation</li><li>SOC 2 support experience; NIST, CIS Controls, or ISO 27001 familiarity</li><li>Audit logging, event collection, and security monitoring administration</li><li>Operational metrics/compliance reporting development experience</li></ul><p><br></p>