Security Specialist

Behind every legend is a flawless foundation. The breach that never happened. That's your best work — and nobody will ever know. DuraServ is looking for a Security Specialist who monitors, analyzes, and protects the enterprise — across Azure environments, endpoints, cloud infrastructure, and regulatory compliance frameworks — with precision that makes the invisible work visible only when it matters most.

About the role

DuraServ operates a national field service organization with hundreds of endpoints, cloud environments, enterprise applications, and team members across nine U.S. and Canadian regions — all of whom depend on a security posture that holds without requiring them to think about it. When the security function works, the business runs. When it doesn't, the consequences reach far beyond IT.

As Security Specialist, you own the continuous monitoring, analysis, and improvement of DuraServ's security posture — vulnerability management, threat detection, attack surface visibility, incident response support, endpoint and cloud security operations, data protection, and compliance alignment across NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks. You work within Microsoft Azure, Defender, Sentinel, and Purview ecosystems and serve as the organization's subject matter expert across the security stack.

Responsibilities

• Threat & Vulnerability Management
  • Monitor, analyze, and support remediation of security vulnerabilities across enterprise systems, applications, endpoints, cloud environments, and network infrastructure
  • Assess and prioritize security findings, threats, and control gaps based on business risk, attack exposure, and operational impact — you know what to fix first and why
  • Monitor and evaluate the organization's attack surface to identify exposed assets, misconfigurations, unauthorized access risks, and security weaknesses before they become incidents
  • Support incident response activities including alert triage, threat investigation, escalation, documentation, and coordination with technical teams
• Cloud & Endpoint Security
  • Support security operations within Microsoft Azure environments — monitoring and administration across Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and related security technologies
  • Assist with endpoint, OS, and network security initiatives — configuration validation, compliance monitoring, access controls, firewall reviews, and device management
  • Support data governance and data security posture management — data classification, labeling, access monitoring, and protection of sensitive information
• Compliance & Continuous Improvement
  • Assist with implementation, validation, and documentation of security controls aligned with NIST, CMMC, ISO, SOC, CIS, and FedRAMP frameworks — your documentation is audit-ready at all times
  • Maintain and update security policies, procedures, standards, audit evidence, and compliance tracking records with the rigor those frameworks demand
  • Collaborate with engineering, infrastructure, data, and compliance teams to improve security posture, support secure AI adoption, participate in tabletop exercises, and drive continuous improvement

Requirements

• 3–6 years of practical experience in information security operations — SOC, IT security, or infrastructure security team experience required
• Strong working knowledge of cybersecurity principles: threat detection, vulnerability management, incident response, SIEM platforms, EDR/XDR solutions, and enterprise security controls
• Experience with Microsoft Azure security environments and the Microsoft security technology stack (Defender, Sentinel, Purview, or equivalent)
• Working knowledge of networking, OS security, identity and access management, endpoint security, and cloud security concepts
• Ability to investigate security alerts, analyze logs and attack activity, prioritize remediation, and support containment and recovery

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field; equivalent hands-on experience considered
• Relevant industry certifications: CompTIA Security+, Certified Ethical Hacker (CEH), Microsoft Azure security certifications, Microsoft Purview certifications, or comparable credentials
• Experience supporting compliance frameworks including NIST, CMMC, ISO, SOC, CIS, or FedRAMP
• Background supporting AI security adoption or secure integration of emerging technologies in enterprise environments

Skills

• Technically fluent in the Microsoft security stack — Defender, Sentinel, Purview, and Azure security operations are your working environment, not your stretch goals
• A threat hunter by instinct — you analyze logs, investigate anomalies, and prioritize remediation with the judgment that comes from experience, not just tooling
• Compliance-capable — you understand NIST, CMMC, ISO, SOC, CIS, and FedRAMP not as acronyms but as frameworks you've worked within and documented against
• A precise documenter — your audit evidence, policies, and incident records are current, complete, and defensible; you don't treat documentation as an afterthought
• A cross-functional collaborator — you work effectively with engineering, infrastructure, data, and compliance teams and communicate security risk to both technical and non-technical audiences
• Analytically disciplined — you assess risk based on business impact, not just CVSS scores; you know the difference between a critical vulnerability in a production environment and one in an isolated test system

Benefits

• Full benefits package: medical, dental, vision, and 401K with company match
• Company-provided life insurance, short-term and long-term disability

Pay

Competitive compensation

Schedule

On-site at DuraServ Corporate in Coppell, TX with no travel requirement

A Note to the Right Candidate. If you've been in a security role where the alerts were noise, the documentation was backlogged, and the compliance frameworks were treated as checkboxes rather than guardrails — this is a different environment. DuraServ is building a security function that operates with rigor — where vulnerabilities get remediated, not deferred; where audit evidence is maintained, not assembled at the last minute; and where the security posture improves continuously because someone owns it. Behind every legend is a flawless foundation. Come help us build ours.