Endpoint & System Security Specialist

HIGH BRIDGE & CO.; King of Prussia (PA); On-site; USD 120,000 - 160,000; Full time

Job summary

HIGH BRIDGE & CO. in King of Prussia, PA is seeking an security-focused engineer to lead the CrowdStrike rollout across legacy and target servers. You will finalize inventory, migration timelines, and deployment plans, coordinating pre-migration testing and EDR deployment.

You will validate workstation images, audit high-risk MDM users, and ensure device posture before migration, while executing pen testing and ITP deployment for identity threat monitoring.

Responsibilities

• Finalize server inventory and migration timelines with DB&T and build the server deployment plan
• Coordinate pre-migration agent testing and execute CrowdStrike EDR deployment across all legacy and target servers
• Conduct security reviews of workstation golden images and validate security tools and core applications
• Audit high-risk Mobile Device Management (MDM) users for enhanced monitoring and verify end-to-end device posture before migration
• Scope and execute penetration testing on Jump Domain infrastructure and deploy CrowdStrike ITP for identity threat monitoring
• Remediate critical and non-critical findings and perform verification rescans to ensure total risk closure
• Validate application security assessments and ensure endpoint/server protection before cutover

Job description

• Server CrowdStrike Rollout: Finalize server inventory and migration timelines with DB&T, build the server deployment plan, coordinate pre-migration agent testing, and execute CrowdStrike EDR agent deployment across all legacy and target servers.
• Workstation & MDM Image Validation: Conduct security reviews of workstation golden images, validate security tools and core application inclusion, audit high-risk Mobile Device Management (MDM) users for enhanced monitoring, and verify end-to-end device posture compliance before migration.
• Jump Domain Pen Testing & Hardening: Scope and execute penetration testing on the Jump Domain infrastructure, deploy CrowdStrike Identity Threat Protection (ITP) for active identity threat monitoring and vulnerability scanning, remediate critical and non-critical findings, and perform verification rescans to ensure total risk closure.
• Final Deployment Sign-off: Validate that application security assessments are complete and endpoint/server protection is fully deployed before cutover.