Enterprise Vulnerability Engineer

Career Choices Dewis Gyrfa Ltd; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

Career Choices Dewis Gyrfa Ltd is seeking an experienced Endpoint Vulnerability Engineer to strengthen security across a large enterprise. You will remediate Windows-based vulnerabilities, automate remediation with PowerShell, and deploy patches using SCCM/MECM.

The role collaborates with Security and End User Technology teams, requiring deep knowledge of Windows 11, AD, GPO, and Microsoft 365, with Nice-to-Haves in Qualys and modern endpoint tooling.

Qualifications

• 5+ years in Endpoint Engineering, Desktop Engineering, or Endpoint Management.
• SCCM/MECM administration, packaging, and software deployment.
• Advanced PowerShell scripting and automation.
• Experience with vulnerability remediation and patch management.
• Strong Windows 11, Active Directory, Group Policy, and Microsoft 365 knowledge.
• Nice to have Qualys vulnerability management experience.
• Microsoft Intune and modern endpoint management.
• Citrix Virtual Apps & Desktops experience.
• Nexthink or Digital Employee Experience tooling.

Responsibilities

• Investigate and remediate endpoint vulnerabilities across the Windows estate.
• Analyse security findings and perform root cause analysis to prevent repeat issues.
• Package, test, and deploy applications, patches, and configuration changes using SCCM/MECM.
• Develop PowerShell automation to improve remediation, reporting, and operational processes.
• Collaborate with Security and Infrastructure teams to drive continuous improvement and enhance endpoint reliability.

Skills

Endpoint engineering

PowerShell scripting

Vulnerability remediation

Root cause analysis

Windows administration

Tools

SCCM/MECM

Qualys

Citrix Virtual Apps & Desktops

Nexthink

Microsoft Intune

Job description

Endpoint Vulnerability Engineer The OpportunityWe're looking for an experienced Endpoint Vulnerability Engineer to help improve security, compliance, and endpoint performance across a large enterprise environment.This role is focused on identifying and remediating endpoint vulnerabilities, driving automation, and delivering long-term engineering solutions.

You'll work closely with Security and End User Technology teams, using tools such as SCCM/MECM, PowerShell, Windows 11, and Qualys to reduce risk and improve operational efficiency.

Key Responsibilities Investigate and remediate endpoint vulnerabilities across the Windows estate.

Analyse security findings and perform root cause analysis to prevent repeat issues.

Package, test, and deploy applications, patches, and configuration changes using SCCM/MECM. Develop PowerShell automation to improve remediation, reporting, and operational processes.

Collaborate with Security and Infrastructure teams to drive continuous improvement and enhance endpoint reliability.

Skills & Experience Essential 5+ years' experience in Endpoint Engineering, Desktop Engineering, or Endpoint Management.

Strong SCCM/MECM administration, application packaging, and software deployment expertise.

Advanced PowerShell scripting and automation skills.

Experience with vulnerability remediation, patch management, and root cause analysis.

Strong Windows 11, Active Directory, Group Policy, and Microsoft 365 knowledge.

Nice to Have Qualys vulnerability management experience.

Microsoft Intune and modern endpoint management.

Citrix Virtual Apps & Desktops.

Nexthink or Digital Employee Experience tooling.