Endpoint Security Engineer - 100% Remote - 1+ Year Contract

Job Details:

Job Title:             Endpoint Security Engineer

Location:             100% Remote

Duration:            1+ Year Contract

Description:

Mission: Harden the workstation layer where AI clients run, where local credentials sit, and where the US-only restriction is enforced.

Responsibilities

• Harden Claude Code, Claude Desktop and Cowork, ChatGPT desktop, and browser-based agents: credential storage, extension, and plugin allowlisting
• Island Browser configuration for the US-only constraint, built so the divergence from Claude Code's global scope is deliberate rather than accidental
• MDM delivery via the macOS plist and HKLM registry, both of which require elevation - treat HKCU as a convenience default, never an enforcement channel
• Close the WSL visibility gap: processes inside the WSL utility VM are invisible to Windows-side EDR sensors

Must Have

• Enterprise endpoint hardening across macOS and Windows: Intune or JAMF, application and extension allowlisting, EDR policy authorship
• Browser security management: extension governance, managed browser policy, enterprise browser deployment
• Understands local credential storage - Keychain, DPAPI, Credential Manager - and how application config defeats them