Endpoint Security & Exposure Engineer — Zero-Trust Innovator

Jacobs; San Francisco (CA); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) plan

PPTO and holidays

Job summary

Jacobs is seeking an Endpoint Security & Exposure Management Engineer to design, implement, and improve controls across Windows, Linux, and macOS. You will lead privilege management, application control, vulnerability management, and remediation governance to reduce cyber risk.

You’ll collaborate with desktop engineering, cloud and operations teams, develop reports and dashboards, and drive risk-based remediation across on‑premises, cloud, and hybrid environments.

Qualifications

• Minimum 5 years of experience in cybersecurity, endpoint security, vulnerability management, or security engineering.
• Hands-on experience administering application control and privilege management solutions.
• Extensive experience managing enterprise vulnerability management programs.
• Experience with ServiceNow Vulnerability Response.
• Experience using leading vulnerability management platforms such as Rapid7, Tenable, Qualys.
• Experience working within large enterprise environments.
• Strong understanding of risk-based vulnerability management and remediation prioritization.

Responsibilities

• Design, implement, and maintain endpoint security controls across Windows, Linux, and macOS environments.
• Administer and optimize application control and allowlisting solutions.
• Develop and maintain privilege management policies based on Zero Trust and least-privilege principles.
• Investigate and resolve endpoint security issues related to application execution, privilege elevation, and policy enforcement.
• Collaborate with desktop engineering teams to develop secure endpoint standards and configurations.
• Support endpoint hardening initiatives aligned with industry best practices and security frameworks.
• Develop reporting and metrics to demonstrate endpoint security effectiveness and risk reduction.
• Manage the enterprise vulnerability management lifecycle across on‑premises, cloud, and hybrid environments.
• Analyze vulnerability findings and prioritize remediation activities based on risk and business impact.
• Drive remediation efforts with infrastructure, application, cloud, and operations teams.
• Monitor remediation progress against defined SLAs and security policies.
• Create dashboards and executive‑level reporting to communicate exposure trends and remediation performance.

Skills

Zero Trust principles

Least-privilege administration

Security incident response

Risk-based decision making

Security governance

Tools

Microsoft Defender for Endpoint

Microsoft Intune

Active Directory / Entra ID

ServiceNow Vulnerability Response

Cloud platforms (Azure, AWS, Google Cloud)

Rapid7

Tenable

Qualys

PowerShell

Python

Job description

Jacobs is seeking an Endpoint Security & Exposure Management Engineer to design, implement, and improve controls across Windows, Linux, and macOS. You will lead privilege management, application control, vulnerability management, and remediation governance to reduce cyber risk.

You’ll collaborate with desktop engineering, cloud and operations teams, develop reports and dashboards, and drive risk-based remediation across on‑premises, cloud, and hybrid environments.