Endpoint Security Engineer (MacOS)

Brooksource; Charlotte (NC); Hybrid; USD 80,000 - 110,000; Full time

Job summary

An enterprise banking partner in Charlotte, NC, is seeking a MacOS-focused Endpoint Cyber Security Engineer to join their team. This hybrid role involves designing and implementing security controls and standards. Candidates should have experience with MacOS packaging, scripting, and a solid understanding of security operations. On-the-job responsibilities include maintaining security client standards and troubleshooting client health issues. A willingness to work after-hours for urgent technical issues is necessary.

Qualifications

• 3 years of experience with MacOS packaging standards.
• 5 years of experience with bash/zsh scripting.
• 2 years understanding of performance metrics for MacOS.
• Experience with JAMF or equivalent management tool.
• Ability to work after-hours when issues arise.

Responsibilities

• Provide technical assistance for client security efforts.
• Support packaging and deployment technologies.
• Maintain security client enterprise deployment standards.
• Administer employee monitoring and forensics infrastructure.
• Troubleshoot endpoint security client health issues.

Skills

Problem-solving and troubleshooting skills

MacOS .pkg packaging

Bash/zsh scripting

JAMF or equivalent management tool

Understanding of performance counters

Documentation creation

Tools

Data Classification tooling

Data Loss Prevention Solutions

Key and Certificate Management solutions

Job description

Location: Charlotte, NC – Hybrid (three days/week onsite in Uptown Charlotte)

Job Structure: 12-month contract with strong likelihood of extension or full-time conversion

Brooksource is searching for a MacOS-focused Endpoint Cyber Security Engineer to join our enterprise banking partner’s Information Protection and Risk Management (IPRM) team in Charlotte, NC. This Engineer will work with a team to design and implement technical controls and tools to meet specific security requirements and define processes and standards to ensure that security configurations and tools are maintained.

Responsibilities

The Cyber Security Technology (CST) engineer will support engineering solutions for our client’s Endpoint Security efforts. Under direction from their manager and in-line with stated strategic objectives, the engineer will work with other engineers to successfully design and implement enterprise quality and standards-oriented project solutions on-time and on budget. The engineer will also be responsible for ongoing incremental engineering required to continuously achieve the best coverage and operation of the technology and will assist in troubleshooting system degradations and outages if required. Some (but not all) of the primary responsibilities the role will be primarily involved with are as follows:

• Provide technical assistance for an enterprise client security health and standardization effort.
• Experience working with packaging and deployment technologies, including a deep technical understanding of well-designed deployables, staged deployments, packaging technologies for multiple operating systems, and unified automation strategies for maintaining the health of those clients.
• Creation and maintenance of security client enterprise deployment standards as part of the overall client health initiative.
• Administration of employee monitoring and forensics infrastructure (e.g., maintenance, configuration and monitoring)
• Identification and resolution of incidents impacting the health of endpoint security clients or related components
• Troubleshoot client health issues and work to maintain a standard for security client health.
• Assist with efforts to improve automation and response activities regarding security client related incidents
• Participate in developing and providing operational documentation to ensure a well-managed and mature security infrastructure, security packaging and automation standard.
• Perform other duties and/or special projects as assigned

Technologies sets the role may secondarily support are as follows:

• Data Classification tooling
• Data Loss Prevention Solutions
• Key and Certificate Management solutions

Required Qualifications

• Outstanding problem-solving and troubleshooting skills with a strong attention to detail and standards.
• Working knowledge of the Apple MacOS .pkg packaging standard and corresponding OS technologies (3 years).
• Deep knowledge of bash/zsh scripting, Python is not needed. (5 years)
• Understanding of performance counters and performance metrics for MacOS. (2 years)
• Exceptional understanding of troubleshooting methodologies, standardization techniques for secure reusable scripts and desire to dig to find root cause without cutting corners.
• Working knowledge of JAMF or equivalent management tool for MacOS (3 years).
• Knowledge and experience creating and maintaining policies, standard operating procedures (SOPs) and technical documents
• Cross-functional understanding of security operations, security practices and the user experience
• Experience developing support and standards documentation (e.g., detailed security implementation and deployment plans, test plans, and security-focused operational procedures and training materials)
• Must be willing to work after-hours and weekends when technical issues arise which require immediate resolution

Desired Qualifications

• Experience creating and troubleshooting enterprise-class Linux RPMs or standardized packages for multiple distributions (4 years).
• Understanding of performance counters and performance metrics for Windows and Linux(2 years)
• Experience creating enterprise-class PowerShell scripts working with multiple application APIs as part of a workflow or orchestration runbook (3+ years).
• Exposure to or working experience with an operational orchestration engine or workflows using standardized modules and enterprise database back-end for reporting and tracking of client health across OS platforms.

Eight Eleven Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, national origin, age, sex, citizenship, disability, genetic information, gender, sexual orientation, gender identity, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.