Endpoint Security Engineer — Protect & Optimize

Loews Hotels & Co; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health benefits

401(k) with match

Paid time off

Bereavement leave

Tuition reimbursement

Pet insurance

Employee discounts

Job summary

Loews Hotels & Co is seeking an experienced security engineering professional to bolster endpoint protection across our enterprise. You’ll partner with Security Operations and IT Service teams to deploy robust security measures, lead threat analysis, and guide security software deployments for Windows, Mac, and Linux environments.

The role emphasizes governance alignment with ISO 27001/NIST/CIS, monitoring security events, and continuous improvement through new technologies.

Qualifications

• 4 Year college/university degree or technical degree required or applicable industry certifications (CISSP preferred) and relevant experience required
• 5+ years of information security experience in an enterprise environment
• 2+ years as a technical project lead and primary support role
• Hands-on expertise in endpoint security technologies and solutions including Privileged Access Management, Endpoint Privilege Management, threat hunting, exploitation mitigation, vulnerability management, and patching

Responsibilities

• Provide subject matter expertise on endpoint security technologies including design, configuration, integration and deployment of enterprise security software and infrastructure
• Enhance and maintain endpoint security platforms and processes including Anti-Virus, Anti Malware, Encryption, System Hardening, EDR, MDM, Web Content Management, DNS Security, Identity Solutions SIEM and Patch Management
• Perform threat analysis, monitor security events for signs of security breaches and triage any suspicious behavior
• Assist with health, performance, stabilization and tuning of all endpoint infrastructure
• Work with senior leadership on research and analysis of emerging technologies that enhance security capabilities and support business objectives; participate in evaluations and roadmap discussions with vendors
• Evaluate existing endpoint security solutions and design strategies to enhance protection against emerging threats
• Assess security technologies to establish opportunities for improved endpoint protection controls
• Ensure security solutions, policies and procedures meet threats to data and endpoint infrastructure; provide technical support processes, metrics, and SLAs
• Maintain and enforce endpoint security policies aligned with Governance, Security-Risk and Audit policies and frameworks (ISO 27001, NIST, CIS)
• Create and deliver reports pertaining to endpoint security and compliance
• Support and document implementation of endpoint security software and infrastructure components
• Oversee projects from inception to closure; ensure completion per requirements and stakeholder standards
• Ensure compliance with governance, risk and audit policies
• Mentor junior staff; serve as escalation contact
• Develop technical documentation and communicate standards across IT teams
• Attend mandatory trainings and meetings; demonstrate proactive work approach
• Manage multiple projects to timely completion
• Perform other duties as assigned

Skills

Endpoint security

Threat hunting

Vulnerability management

Identity & access security

SIEM monitoring

Incident response

Windows/Mac/Linux

Privileged access management

Cloud security

Mobile device management

Network security

IT governance ITIL/NIST

PCI/SOX compliance

Active Directory/Azure AD

Patch management

Education

Bachelors degree or technical degree; CISSP preferred

Tools

Ivanti

SentinelOne

Palo Alto Networks

Sophos

Cisco Umbrella

Idira CyberArk

Job description

Loews Hotels & Co is seeking an experienced security engineering professional to bolster endpoint protection across our enterprise. You’ll partner with Security Operations and IT Service teams to deploy robust security measures, lead threat analysis, and guide security software deployments for Windows, Mac, and Linux environments.

The role emphasizes governance alignment with ISO 27001/NIST/CIS, monitoring security events, and continuous improvement through new technologies.