Endpoint Security Engineer

Endpoint Security Engineer
Location: San Francisco preferred
Other locations: Austin, New York, Washington DC
Work: 100% onsite – 5 days/week
Experience: 5+ years
Level: Mid-Senior
Duration: 12 months

What will this person do?
This person will protect company laptops, desktops, and other devices.
They will manage endpoint security, control which devices can access company systems, identify security vulnerabilities, and automate fixes.

Main Responsibilities

• Create and manage endpoint security policies
• Control device access using device posture and conditional access
• Work with security technologies such as:
  • WARP
  • SCEP
  • NAC
  • Certificates
  • EDR
• Manage vulnerability identification and remediation
• Connect endpoint security tools with identity, network, and device-management platforms
• Automate security checks, reporting, and remediation using scripts/APIs
• Create security procedures, exception processes, metrics, and audit documentation
• Apply Zero Trust and least-privilege security principles

Must-Have Skills

1. Endpoint Security / Security Engineering
2. Vulnerability Management & Remediation
3. Device Posture / Conditional Access
4. Certificates / Endpoint Security Controls
5. Enterprise Security Platforms
6. Automation / Scripting
7. Zero Trust concepts
8. Ability to work onsite 5 days/week

Good-to-Have Skills

• WARP
• SCEP
• NAC
• EDR
• Kandji
• Jamf
• Microsoft Intune
• Okta
• Terraform / Infrastructure as Code
• Git
• Security certifications
• AI/security automation

Best Candidate Profile:
An Endpoint Security Engineer / Security Engineer / Endpoint Security Specialist who has hands-on experience with:
Endpoint Security + Vulnerability Management + EDR + Device Compliance + Conditional Access + Certificates + Automation