Endpoint Security Engineer

About the role

We are looking for an Endpoint Security Engineer to lead vulnerability management across our enterprise devices. The role focuses on patch deployment, configuration hardening and ensuring compliance with security standards.

Key responsibilities

• Lead vulnerability management initiatives across enterprise endpoints, ensuring timely remediation and compliance.
• Deploy security patches and remediation packages to reduce exposure to known threats.
• Manage and optimise device configurations for precise targeting and efficient patch deployment.
• Analyse vulnerabilities and propose tailored remediation strategies to improve resolution times.
• Collaborate with security teams to align remediation efforts with organisational policies and regulatory requirements.
• Monitor remediation progress and generate reports to track compliance and effectiveness.
• Provide advanced support for endpoint security issues, including troubleshooting patch failures and system anomalies.
• Conduct root‑cause analysis for recurring vulnerabilities and recommend long‑term solutions.
• Enhance endpoint hardening by implementing configuration baselines and security controls.
• Automate software deployment processes to accelerate delivery and reduce human error.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field.
• Proven experience in endpoint security management with a focus on vulnerability management and patch deployment.
• Strong knowledge of Microsoft SCCM or similar endpoint management tools and Microsoft Intune.
• Proficiency in scripting languages such as PowerShell or VBA for automation.
• Familiarity with cloud environments such as Azure and Amazon AWS.
• Knowledge of security frameworks and compliance standards such as CIS benchmarks.
• Experience with Microsoft 365 administration and security.
• Experience with Active Directory administration and Group Policy management.
• Excellent troubleshooting, problem‑solving, communication and collaboration skills.
• Relevant certifications (e.g., Microsoft Certified: Azure Fundamentals, Security, Compliance and Identity Fundamentals, Microsoft 365 Fundamentals, ISC2 Certified in Cybersecurity) are a plus.

Required skills

• Microsoft System Center Configuration Manager (SCCM)
• Microsoft Intune
• PowerShell
• VBA
• Microsoft Azure
• Amazon AWS
• CIS Benchmarks
• Microsoft 365
• Active Directory
• Group Policy
• Workspace One
• ServiceNow
• Tenable vulnerability scanning
• Carbon Black
• Zscaler
• Ivanti Secure Access