Endpoint/Security Engineer mid level

ITCAN PTE. LIMITED; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

ITCAN PTE. LIMITED is seeking an experienced Endpoint Security Engineer to lead initiatives that secure and harden enterprise endpoints. You will drive vulnerability management, patch deployment, and automation to strengthen the organization's security posture.

Collaborate with security teams to deliver proactive threat mitigation, provide advanced endpoint support, and develop baseline configurations and reports that track remediation progress and compliance across the environment.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Experience in endpoint security management with a focus on vulnerability management and patch deployment.
• Strong knowledge of SCCM or similar endpoint management tools.
• Strong knowledge of Microsoft Intune.
• Proficiency in scripting languages such as PowerShell or VBA for automation.
• Familiarity with cloud environments such as Azure and Amazon AWS.
• Knowledge of security frameworks and compliance standards such as CIS benchmarks.
• Experience with Microsoft 365 administration and security.
• Experience with Active Directory administration and Group Policy management.
• Excellent troubleshooting and problem-solving skills. Strong communication and collaboration skills.

Responsibilities

• Lead vulnerability management initiatives across enterprise endpoints, ensuring timely remediation and compliance with security standards.
• Deploy security patches and remediation packages, reducing exposure to known threats.
• Manage and optimize device configurations for precise targeting and efficient patch deployment.
• Analyze vulnerabilities and propose tailored remediation strategies, improving resolution times and reducing risk.
• Collaborate with security teams to align remediation efforts with organizational policies and regulatory requirements.
• Monitor remediation progress and generate reports to track compliance and effectiveness of vulnerability mitigation.
• Provide advanced support for endpoint security issues, including troubleshooting of patch failures and system anomalies.
• Conduct root cause analysis for recurring vulnerabilities and recommend long-term solutions to prevent reoccurrence.
• Enhance endpoint hardening by implementing configuration baselines and security controls.
• Automate software deployment processes to accelerate delivery and reduce human error.

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

SCCM

Microsoft Intune

PowerShell

VBA

Azure

AWS

CIS benchmarks

Microsoft 365 security

Active Directory

Group Policy

Job description

Job Summary:

We are seeking a skilled Endpoint Security Engineer to lead initiatives that ensure the security and compliance of our enterprise endpoints. The ideal candidate will have a strong background in vulnerability management, patch deployment, and endpoint hardening, with a focus on automation and proactive threat mitigation. You will collaborate with security teams, provide advanced support for endpoint security issues, and drive continuous improvement in our security posture.

Responsibilities:

• Lead vulnerability management initiatives across enterprise endpoints, ensuring timely remediation and compliance with security standards.
• Deploy security patches and remediation packages, reducing exposure to known threats.
• Manage and optimize device configurations for precise targeting and efficient patch deployment.
• Analyze vulnerabilities and propose tailored remediation strategies, improving resolution times and reducing risk.
• Collaborate with security teams to align remediation efforts with organizational policies and regulatory requirements.
• Monitor remediation progress and generate reports to track compliance and effectiveness of vulnerability mitigation.
• Provide advanced support for endpoint security issues, including troubleshooting of patch failures and system anomalies.
• Conduct root cause analysis for recurring vulnerabilities and recommend long-term solutions to prevent reoccurrence.
• Enhance endpoint hardening by implementing configuration baselines and security controls.
• Automate software deployment processes to accelerate delivery and reduce human error.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Proven experience in endpoint security management, with a focus on vulnerability management and patch deployment.
• Strong knowledge of Microsoft System Center Configuration Manager (SCCM) or similar endpoint management tools.
• Strong knowledge of Microsoft Intune
• Proficiency in scripting languages such as PowerShell or VBA for automation.
• Familiarity with cloud environments such as Azure and Amazon AWS.
• Knowledge of security frameworks and compliance standards such as CIS benchmarks.
• Experience with Microsoft 365 administration and security.
• Experience with Active Directory administration and Group Policy management.
• Excellent troubleshooting and problem-solving skills.Strong communication and collaboration skills.

Bonus Points:

• Relevant certifications such as Microsoft Certified: Azure Fundamentals, Microsoft Certified: Security, Compliance, and Identity Fundamentals, Microsoft 365 Certified: Fundamentals, or Certified in Cybersecurity: ISC2.
• Experience with Workspace One.
• Experience with ServiceNow for dashboard creation and report generation.
• Experience with vulnerability scanning tools such as Tenable.
• Experience with solution such as Carbon Black, Zscaler, Ivanti Secure Access