Endpoint & Identity Security Engineer (Onsite, NYC)

REDLEO SOFTWARE INC.; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

REDLEO SOFTWARE INC. in NYC is seeking an Endpoint Security Engineer to strengthen enterprise security by implementing hardening standards, securing Active Directory, and managing endpoint protection across Windows and Linux.

You will maintain CIS-aligned baselines, enforce GPO-driven security controls, and support vulnerability remediation using industry‑leading tools to keep endpoints, servers, and identities compliant and resilient.

Qualifications

• Windows Server and Active Directory administration required.
• CIS Benchmark hardening for Windows, Linux, endpoints.
• Group Policy (GPO) security and governance experience.
• Experience with endpoint security platforms: Defender, CrowdStrike, SentinelOne, Trellix, Symantec.
• Core security controls: PAM, MFA, encryption, app whitelisting, device control.
• Experience with vulnerability management tools: Tenable, Qualys, Rapid7.
• Familiarity with CIS, NIST, ISO 27001 security frameworks.
• PowerShell automation for security configuration.

Responsibilities

• Strengthen enterprise security by implementing hardening standards.
• Secure Active Directory and manage endpoint protection across Windows and Linux environments.
• Maintain CIS-aligned baselines and enforce GPO-driven controls.
• Support vulnerability remediation using leading tools and keep endpoints, servers, and identities compliant.

Skills

Active Directory

CIS Benchmark Hardening

Group Policy

Endpoint Security Platforms

PAM

MFA

Encryption

App Whitelisting

Device Control

Vulnerability Scanning

Tenable

Qualys

Rapid7

CIS

NIST

ISO 27001

PowerShell

Tools

Microsoft Defender

CrowdStrike

SentinelOne

Trellix

Symantec

Tenable

Qualys

Rapid7

Job description

REDLEO SOFTWARE INC. in NYC is seeking an Endpoint Security Engineer to strengthen enterprise security by implementing hardening standards, securing Active Directory, and managing endpoint protection across Windows and Linux.

You will maintain CIS-aligned baselines, enforce GPO-driven security controls, and support vulnerability remediation using industry‑leading tools to keep endpoints, servers, and identities compliant and resilient.