Senior Infrastructure Security Consultant – Server Hardening

Company: Bounteous
Apply for the Senior Infrastructure Security Consultant – Server Hardening
Location: Newbury
Job Description:

Windows and Linux System Administration

  • OS & Role Configuration: Deep familiarity with Windows Server operating systems, Active Directory (AD), Group Policy Objects (GPOs), and basic Linux distribution environments.
  • Enterprise Infrastructure & Services: Knowledge of critical server applications such as Microsoft IIS, SQL Server, and network services, as the POC will analyze policies targeting these specific server roles.
  • Privileged Access Management: Ability to manage service accounts, domain permissions, and local administrator rights required to install the CHS management console and deploy its micro-agents to the targeted test servers.

2. Cybersecurity & Regulatory Compliance

  • Security Benchmarks: A solid understanding of major regulatory frameworks and configuration standards, specifically CIS Benchmarks (Center for Internet Security), DISA STIGs, or NIST guidelines.
  • Policy Gap Analysis: The capability to review existing corporate security policies, translate them into hardening criteria, and evaluate the “Actual Values” versus target compliance scores generated by CalCom.

3. Change Management & Production Operations

  • Risk & Impact Evaluation: The ability to analyze data from CalCom’s Learning Mode. Staff must be able to look at simulated impacts, identify exceptions where a hardening rule might break a production application, and determine the safe course of action before moving to “Enforcement Mode”.
  • Enterprise Rollback Coordination: Familiarity with organizational change control procedures. If a rule causes unexpected behavior, the technician must know how to trigger the one-click rollback mechanism or document configuration drift.

4. Integration & Monitoring (Optional but recommended)

  • SIEM / SOC Integration: Basic skills to configure alerts and map CalCom compliance event logs to your centralized security monitoring platforms (like a SIEM system) to validate real-time access control notifications.

#J-18808-Ljbffr…

Posted: October 12th, 2026