Endpoint Vulnerability & Automation Engineer

Career Choices Dewis Gyrfa Ltd; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

Career Choices Dewis Gyrfa Ltd is seeking an experienced Endpoint Vulnerability Engineer to strengthen security across a large enterprise. You will remediate Windows-based vulnerabilities, automate remediation with PowerShell, and deploy patches using SCCM/MECM.

The role collaborates with Security and End User Technology teams, requiring deep knowledge of Windows 11, AD, GPO, and Microsoft 365, with Nice-to-Haves in Qualys and modern endpoint tooling.

Qualifications

• 5+ years in Endpoint Engineering, Desktop Engineering, or Endpoint Management.
• SCCM/MECM administration, packaging, and software deployment.
• Advanced PowerShell scripting and automation.
• Experience with vulnerability remediation and patch management.
• Strong Windows 11, Active Directory, Group Policy, and Microsoft 365 knowledge.
• Nice to have Qualys vulnerability management experience.
• Microsoft Intune and modern endpoint management.
• Citrix Virtual Apps & Desktops experience.
• Nexthink or Digital Employee Experience tooling.

Responsibilities

• Investigate and remediate endpoint vulnerabilities across the Windows estate.
• Analyse security findings and perform root cause analysis to prevent repeat issues.
• Package, test, and deploy applications, patches, and configuration changes using SCCM/MECM.
• Develop PowerShell automation to improve remediation, reporting, and operational processes.
• Collaborate with Security and Infrastructure teams to drive continuous improvement and enhance endpoint reliability.

Skills

Endpoint engineering

PowerShell scripting

Vulnerability remediation

Root cause analysis

Windows administration

Tools

SCCM/MECM

Qualys

Citrix Virtual Apps & Desktops

Nexthink

Microsoft Intune

Job description

Career Choices Dewis Gyrfa Ltd is seeking an experienced Endpoint Vulnerability Engineer to strengthen security across a large enterprise. You will remediate Windows-based vulnerabilities, automate remediation with PowerShell, and deploy patches using SCCM/MECM.

The role collaborates with Security and End User Technology teams, requiring deep knowledge of Windows 11, AD, GPO, and Microsoft 365, with Nice-to-Haves in Qualys and modern endpoint tooling.