Application Allowlisting Security Engineer

Apex Systems; Chicago (IL); On-site; USD 96,000 - 156,000; Full time

Job summary

Everforth Apex is seeking an Application Allowlisting Security Engineer in Chicago, IL to design and manage endpoint allowlisting policies. You will evaluate requests, enforce controls, and work with product and security teams to onboard new applications across enterprise endpoints.

The role requires strong Windows expertise, PowerShell scripting, and a proven ability to navigate change-management processes. Join a team focused on secure, scalable application control across the enterprise.

Qualifications

• Experience with application allowlisting and endpoint protection technologies.
• Strong experience supporting Windows environments and understanding Windows applications, services, executables, and processes.
• Proficient in PowerShell scripting and policy enforcement within Windows environments.
• Experience troubleshooting compatibility, policy enforcement, or security-control issues.
• Familiar with enterprise change-management and production implementation processes.

Responsibilities

• Design, implement, and manage application allowlisting across endpoints and servers.
• Develop, test, and maintain allowlisting policies for applications, scripts, and executables.
• Evaluate requests and determine appropriate allowlisting approaches based on publisher, file hashes, and identity.
• Collaborate with owners and security teams to validate business use cases before onboarding.
• Troubleshoot blocked applications and coordinate policy or configuration changes with teams.

Skills

Application allowlisting

Windows administration

PowerShell scripting

Endpoint security

Change-management

Tools

Windows OS

Group Policy

Endpoint protection systems

Job description

## Job Description# Application Allowlisting Security EngineerApply**Job#: 3057231****Job Description:**Application Allowlisting EngineerLocations: Charlotte NC, Denver CO, Chicago IL, Washington DCApex does not support C2C hiring.* Support the design, implementation, and ongoing management of **application allowlisting/application control** capabilities across enterprise endpoints and servers.* Develop, review, test, and maintain application control policies and rules for applications, executables, scripts, libraries, and other components.* Evaluate application requests and determine appropriate allowlisting approaches based on factors such as **publisher/signing information, file hashes, application identity, and approved execution paths**.* Partner with application owners and security teams to validate business use cases and understand application dependencies prior to onboarding.* Review security, compliance, data-handling, and operational requirements associated with new applications and integrations.* Support application onboarding through development, testing, production-readiness, and implementation activities.* Troubleshoot blocked applications, scripts, or processes and identify appropriate policy or configuration changes.* Partner with Product Owners and Endpoint Control Owners to document requirements, approvals, exceptions, and technical decisions.* Support **PowerShell and other scripting-based applications or automation** within application-control policies.* Coordinate with Operations and engineering teams when application-control changes require deployment or configuration changes.* Work with application owners, vendors, and support teams to resolve compatibility, onboarding, and production issues.* Monitor application-control health and support policy enhancements, maintenance, exception management, and issue remediation after implementation.* Document technical requirements, configurations, processes, and operational procedures.* Support change-management processes associated with production security-control changes.Required Qualifications* Experience with **application allowlisting, application control, endpoint security, or endpoint protection technologies**.* Strong experience supporting **Windows environments** and understanding Windows applications, services, executables, and processes.* Experience developing, implementing, or troubleshooting security policies and controls.* Working knowledge of **PowerShell** and script execution within Windows environments.* Experience troubleshooting application compatibility, policy enforcement, or security-control issues.* Experience working within enterprise **change-management and production implementation processes**.* Ability to work across Security, Infrastructure, Operations, Product, and application-development teams.* Strong documentation, troubleshooting, and technical problem-solving skills. *Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.**Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.apexsystems.com/privacy-policy**Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.**Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.**If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [e-mail] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.**UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.***Employee Type:** Contract**Location:** Chicago, IL, US**Job Type:** Engineering and Technicians**Date Posted:** October 26, 2026**Pay Range:** $70 - $113 per hour