Endpoint Security Engineer: Vulnerability & Patch Lead

ITCAN PTE. LIMITED; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

ITCAN PTE. LIMITED is seeking an experienced Endpoint Security Engineer to lead initiatives that secure and harden enterprise endpoints. You will drive vulnerability management, patch deployment, and automation to strengthen the organization's security posture.

Collaborate with security teams to deliver proactive threat mitigation, provide advanced endpoint support, and develop baseline configurations and reports that track remediation progress and compliance across the environment.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Experience in endpoint security management with a focus on vulnerability management and patch deployment.
• Strong knowledge of SCCM or similar endpoint management tools.
• Strong knowledge of Microsoft Intune.
• Proficiency in scripting languages such as PowerShell or VBA for automation.
• Familiarity with cloud environments such as Azure and Amazon AWS.
• Knowledge of security frameworks and compliance standards such as CIS benchmarks.
• Experience with Microsoft 365 administration and security.
• Experience with Active Directory administration and Group Policy management.
• Excellent troubleshooting and problem-solving skills. Strong communication and collaboration skills.

Responsibilities

• Lead vulnerability management initiatives across enterprise endpoints, ensuring timely remediation and compliance with security standards.
• Deploy security patches and remediation packages, reducing exposure to known threats.
• Manage and optimize device configurations for precise targeting and efficient patch deployment.
• Analyze vulnerabilities and propose tailored remediation strategies, improving resolution times and reducing risk.
• Collaborate with security teams to align remediation efforts with organizational policies and regulatory requirements.
• Monitor remediation progress and generate reports to track compliance and effectiveness of vulnerability mitigation.
• Provide advanced support for endpoint security issues, including troubleshooting of patch failures and system anomalies.
• Conduct root cause analysis for recurring vulnerabilities and recommend long-term solutions to prevent reoccurrence.
• Enhance endpoint hardening by implementing configuration baselines and security controls.
• Automate software deployment processes to accelerate delivery and reduce human error.

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

SCCM

Microsoft Intune

PowerShell

VBA

Azure

AWS

CIS benchmarks

Microsoft 365 security

Active Directory

Group Policy

Job description

ITCAN PTE. LIMITED is seeking an experienced Endpoint Security Engineer to lead initiatives that secure and harden enterprise endpoints. You will drive vulnerability management, patch deployment, and automation to strengthen the organization's security posture.

Collaborate with security teams to deliver proactive threat mitigation, provide advanced endpoint support, and develop baseline configurations and reports that track remediation progress and compliance across the environment.