Endpoint Security Engineer

INNOVATIQ TECHNOLOGIES PTE. LTD.; Santo Niño 1st; On-site; PHP 893,000 - 1,339,000; Full time

Job summary

INNOVATIQ TECHNOLOGIES PTE. LTD. in the Philippines seeks an experienced Endpoint Security Engineer to lead vulnerability management across enterprise endpoints and ensure timely remediation in line with security standards.

You will deploy patches, optimize device configurations, analyze vulnerabilities, and collaborate with security teams to align remediation with policies and regulatory requirements. Strong scripting and cloud knowledge are required.

Qualifications

• Bachelor's degree or equivalent in Computer Science, Information Security, or related field.
• Proven experience in endpoint security management with vulnerability management and patch deployment.
• Strong knowledge of SCCM or similar endpoint management tools.
• Strong knowledge of Microsoft Intune.
• PowerShell or VBA for automation.
• Familiarity with Azure and AWS.
• Familiarity with CIS benchmarks and security frameworks.
• Experience with Microsoft 365 administration and security.
• Experience with Active Directory administration and Group Policy management.
• Excellent troubleshooting and communication skills.

Responsibilities

• Lead vulnerability management initiatives across enterprise endpoints, ensuring timely remediation and compliance with security standards.
• Deploy security patches and remediation packages, reducing exposure to known threats.
• Manage and optimize device configurations for precise targeting and efficient patch deployment.
• Analyze vulnerabilities and propose tailored remediation strategies, improving resolution times and reducing risk.
• Collaborate with security teams to align remediation efforts with organizational policies and regulatory requirements.
• Monitor remediation progress and generate reports to track compliance and effectiveness of vulnerability mitigation.
• Provide advanced support for endpoint security issues, including troubleshooting of patch failures and system anomalies.
• Conduct root cause analysis for recurring vulnerabilities and recommend long-term solutions to prevent reoccurrence.
• Enhance endpoint hardening by implementing configuration baselines and security controls.
• Automate software deployment processes to accelerate delivery and reduce human error.

Skills

Endpoint security management

Vulnerability management

SCCM

Intune

PowerShell

VBA

Azure

AWS

CIS benchmarks

Microsoft 365 administration

Active Directory administration

Group Policy management

Troubleshooting

Communication skills

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

Workspace One

ServiceNow

Tenable

Carbon Black

Zscaler

Ivanti Secure Access

Job description

Responsibilities:

• Lead vulnerability management initiatives across enterprise endpoints, ensuring timely remediation and compliance with security standards.
• Deploy security patches and remediation packages, reducing exposure to known threats.
• Manage and optimize device configurations for precise targeting and efficient patch deployment.
• Analyze vulnerabilities and propose tailored remediation strategies, improving resolution times and reducing risk.
• Collaborate with security teams to align remediation efforts with organizational policies and regulatory requirements.
• Monitor remediation progress and generate reports to track compliance and effectiveness of vulnerability mitigation.
• Provide advanced support for endpoint security issues, including troubleshooting of patch failures and system anomalies.
• Conduct root cause analysis for recurring vulnerabilities and recommend long-term solutions to prevent reoccurrence.
• Enhance endpoint hardening by implementing configuration baselines and security controls.
• Automate software deployment processes to accelerate delivery and reduce human error.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Proven experience in endpoint security management, with a focus on vulnerability management and patch deployment.
• Strong knowledge of Microsoft System Center Configuration Manager (SCCM) or similar endpoint management tools.
• Strong knowledge of Microsoft Intune
• Proficiency in scripting languages such as PowerShell or VBA for automation.
• Familiarity with cloud environments such as Azure and Amazon AWS.
• Knowledge of security frameworks and compliance standards such as CIS benchmarks.
• Experience with Microsoft 365 administration and security.
• Experience with Active Directory administration and Group Policy management.
• Excellent troubleshooting and problem-solving skills.
• Strong communication and collaboration skills.

Bonus Points:

• Relevant certifications such as Microsoft Certified: Azure Fundamentals, Microsoft Certified: Security, Compliance, and Identity Fundamentals, Microsoft 365 Certified: Fundamentals, or Certified in Cybersecurity: ISC2.
• Experience with Workspace One.
• Experience with ServiceNow for dashboard creation and report generation.
• Experience with vulnerability scanning tools such as Tenable.
• Experience with solution such as Carbon Black, Zscaler, Ivanti Secure Access.