Lead Mac Integration & Vulnerability Engineer

Capital One; McLean (VA); On-site; USD 165,000 - 188,000; Full time

Job summary

Capital One is seeking a Lead Integration Engineer to join the Mac Engineering team. The role focuses on macOS vulnerability management to keep the fleet secure and vuln-free, with opportunities to improve vulnerability management processes and observability.

Responsibilities include packaging and testing patches, reviewing vulnerability reports, collaborating with partners, and enhancing telemetry from Mac endpoints to inform data-driven decisions.

Qualifications

• Two+ years managing macOS devices with JAMF Pro.
• Two+ years of Vulnerability Management and patching experience.
• Two+ years developing Shell scripts, AppleScript, or Python scripts.

Responsibilities

• Package, test, and schedule patches for business software when vulnerability fixes are released.
• Review vulnerability management reports and investigate devices with active vulnerabilities.
• Collaborate with vulnerability management partners for debugging false-positives and more vulnerability info.
• Escalate vulnerabilities or patches requiring exceptions due to user impact.
• Assist with packaging requests for new software and updates.
• Suggest improvements to vulnerability management posture and compliance metrics.
• Review automation processes to ensure updates to client software.
• Assist with testing and validation of new software and agents.
• Improve vulnerability observability with telemetry from Mac endpoints for data-driven decisions.

Skills

macOS

JAMF Pro

Vulnerability Management

Shell scripting

Python

AppleScript

Education

Bachelor’s Degree

Tools

JAMF Composer

Apple's package utility

Suspicious Package

Qualys

Crowdstrike

Nessus

Job description

Capital One is seeking a Lead Integration Engineer to join the Mac Engineering team. The role focuses on macOS vulnerability management to keep the fleet secure and vuln-free, with opportunities to improve vulnerability management processes and observability.

Responsibilities include packaging and testing patches, reviewing vulnerability reports, collaborating with partners, and enhancing telemetry from Mac endpoints to inform data-driven decisions.