Systems Administrator (Vulnerability Management)

Roles & Responsibilities

• Vulnerability Management: Execute enterprise asset scanning, prioritize threats, and expedite patch remediation (Windows/Android/macOS).
• Application Governance: Manage the Dillard’s software storefront, ensuring systematic packaging, patching, and compliance.
• Operational Security: Define security configurations and maintain robust vulnerability response plans.

Required Skills

• Vulnerability Assessment Tools: Expert proficiency with industry-standard scanners such as Tenable Nessus, Qualys, or Rapid7 InsightVM to conduct both authenticated and unauthenticated scans.
• Risk Prioritization & Threat Intelligence: Deep understanding of the Common Vulnerability Scoring System (CVSS), along with the ability to cross-reference findings with real-world threat intelligence (e.g., CISA's Known Exploited Vulnerabilities catalog) to prioritize what actually needs patching.
• Operating Systems & Architecture: Strong foundational knowledge of Windows, Linux/Unix, and cloud environments (AWS, Azure, or GCP). You must know how these systems work to understand how they can be exploited.
• Network & Web Application Security: Familiarity with network protocols, firewalls, and application security risks (such as the OWASP Top 10).
• Patch Management & Remediation: Understanding how patches, configurations, and mitigations are deployed via enterprise tools like SCCM, Ansible, or group policies.

Minimum Years of Experience

Requirements

• Vulnerability Assessment Tools: Expert proficiency with industry-standard scanners such as Tenable Nessus, Qualys, or Rapid7 InsightVM to conduct both authenticated and unauthenticated scans.
• Risk Prioritization & Threat Intelligence: Deep understanding of the Common Vulnerability Scoring System (CVSS), along with the ability to cross-reference findings with real-world threat intelligence (e.g., CISA's Known Exploited Vulnerabilities catalog) to prioritize what actually needs patching.
• Operating Systems & Architecture: Strong foundational knowledge of Windows, Linux/Unix, and cloud environments (AWS, Azure, or GCP). You must know how these systems work to understand how they can be exploited.
• Network & Web Application Security: Familiarity with network protocols, firewalls, and application security risks (such as the OWASP Top 10).
• Patch Management & Remediation: Understanding how patches, configurations, and mitigations are deployed via enterprise tools like SCCM, Ansible, or group policies.