Jobs via Dice · 5 hours ago
Endpoint Security Engineer - Remote
United States
Full-time
Remote
Senior Level
5+ years expDivIHN Integration Inc. is a CMMI ML3-certified Technology and Talent solutions firm that is seeking an Endpoint Security Engineer. The role involves improving endpoint cyber hygiene and vulnerability management, collaborating closely with the endpoint engineering team to enhance security operations and strengthen the security posture of client workstations.
Computer Software
No H1B
Responsibilities
Identify, analyze, and prioritize endpoint vulnerabilities using tools such as Tenable, Axonius, Jamf Pro, SCCM, Intune, Active Directory, and Entra
Assess environmental and operational factors that may impact remediation feasibility and timelines
Provide risk-based recommendations to improve the vulnerability management program
Develop, test, and deploy remediation scripts and configurations for Windows and macOS endpoints using tools such as Jamf, ConfigMgr/SCCM, Intune, and Group Policy
Write clear, maintainable scripts and automation (e.g., modular logic, meaningful naming, basic error handling and logging) that can be reused by the team
Document scripts and configurations with purpose, parameters, usage instructions, and any security considerations to support troubleshooting and cross-team adoption
Maintain an organized library of remediation artifacts; if applicable, help establish and use a version-controlled repository (e.g., Git) to track changes and support basic peer review
Contribute to secure baseline configurations aligned with ClientCSPP, NIST 800-53 Rev 5, CIS Benchmarks, Microsoft Security Baselines, DISA STIGs, and/or macOS Security Compliance Project
Assist in the development, testing, implementation, and documentation of baseline configurations
Monitor baseline implementation for coverage, effectiveness, unapproved deviations, and required changes
Participate in regular team meetings to provide status updates, propose improvements, and discuss implementation strategies
Monitor endpoint compliance and provide reports on remediation effectiveness and baseline configurations to leadership and stakeholders
Qualification
Required
Five or more years of relevant experience
Level III-Works independently with periodic review of work by a higher classification staff member
Level IV-Performs investigation and analysis of business requirements; establishes requirements and objectives of solution; prepares detailed project plans; recommends methodologies necessary to accomplish plan
Consults with application managers on planning and monitoring of work
Hands-on expertise with SCCM, Jamf Pro, and/or Microsoft Intune for Windows and macOS endpoints
Experience in packaging and deploying applications, security updates, and scripts across enterprise platforms
Familiarity with Group Policy and Intune for configuration management
Proficiency in automation scripting (PowerShell, Bash, Python) with emphasis on modular, reusable, and secure code
Strong grasp of SDLC principles: requirements gathering, design, implementation, testing, deployment, and maintenance
Experience with version control systems (Git) and collaborative development workflows (branching, pull requests, peer review)
Ability to document code and remediations clearly for cross-team adoption and knowledge transfer
Knowledge of CVE program, NIST Vulnerability Database, CISA Known Exploited Vulnerability Database, and overall vulnerability management processes
Experience implementing NIST 800-53 Rev 5, CIS Benchmarks, DISA STIGs, Microsoft Security Baselines, and macOS Security Compliance Project
Ability to translate technical fixes into measurable improvements in endpoint security posture
Experience using Tenable.SC or Tenable.VM as part of vulnerability management
Strong problem-solving skills with a focus on reducing organizational risk
Effective communication skills to convey technical concepts to both technical and non-technical stakeholders
Collaborative mindset for working within a mixed Windows/macOS engineering team
Preferred
Level 3 or 4 candidate from Appendix C
The ideal candidate will bring endpoint engineering expertise, strong cybersecurity skills, and modern, secure coding practices with 3-5 years of experience in complex large enterprise environments
Company
Jobs via Dice
Welcome to Jobs via Dice, the go-to destination for discovering the tech jobs you want.
0-1 employees
Funding
Current Stage
Early StageCompany data provided by crunchbase