Area(s) of responsibility Role Overview We are seeking a skilled and detail-oriented Security Hardening & Misconfiguration Remediation Specialist to drive security configuration improvements across enterprise environments. The role involves identifying, analyzing, and remediating system misconfigurations while ensuring minimal business disruption. The candidate will work closely with application owners, infrastructure teams, and clients to strengthen security posture in alignment with industry standards. Preferred Experience 2–5 years of experience in Security Hardening, Configuration Management, or Security Operations. Experience in enterprise environments with structured change management processes. Key Responsibilities Security Hardening & Misconfiguration Management Analyze security misconfigurations across servers, endpoints, and infrastructure components. Drive remediation activities in coordination with infrastructure and application teams. Evaluate operational and business impact before implementing configuration changes. Understand and analyze application dependencies prior to remediation actions. Document exceptions and risk acceptance with proper justification and approvals. Vulnerability & Configuration Governance Support vulnerability management processes (knowledge of vulnerability lifecycle is an added advantage). Interpret security baselines and compliance standards such as NIST and CIS Benchmarks. Review and remediate insecure configurations, policies, and legacy protocols. Ensure RBAC (Role-Based Access Control) is properly implemented and aligned with least privilege principles. Change & Stakeholder Management Present remediation plans in CAB (Change Advisory Board) meetings. Coordinate change implementation through ITSM tools such as ServiceNow (SNOW). Engage with clients and internal stakeholders to provide remediation updates and clarifications. Provide clear risk communication and remediation timelines. Technical Analysis & Implementation: Perform Windows OS security configuration reviews. Implement and validate registry-level changes and system hardening controls. Execute and analyze Windows commands and scripts for configuration validation. Identify and validate insecure services, permissions, and system-level misconfigurations.