Security Engineer (Endpoint)

REDLEO SOFTWARE INC.; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

REDLEO SOFTWARE INC. in NYC is seeking an Endpoint Security Engineer to strengthen enterprise security by implementing hardening standards, securing Active Directory, and managing endpoint protection across Windows and Linux.

You will maintain CIS-aligned baselines, enforce GPO-driven security controls, and support vulnerability remediation using industry‑leading tools to keep endpoints, servers, and identities compliant and resilient.

Qualifications

• Windows Server and Active Directory administration required.
• CIS Benchmark hardening for Windows, Linux, endpoints.
• Group Policy (GPO) security and governance experience.
• Experience with endpoint security platforms: Defender, CrowdStrike, SentinelOne, Trellix, Symantec.
• Core security controls: PAM, MFA, encryption, app whitelisting, device control.
• Experience with vulnerability management tools: Tenable, Qualys, Rapid7.
• Familiarity with CIS, NIST, ISO 27001 security frameworks.
• PowerShell automation for security configuration.

Responsibilities

• Strengthen enterprise security by implementing hardening standards.
• Secure Active Directory and manage endpoint protection across Windows and Linux environments.
• Maintain CIS-aligned baselines and enforce GPO-driven controls.
• Support vulnerability remediation using leading tools and keep endpoints, servers, and identities compliant.

Skills

Active Directory

CIS Benchmark Hardening

Group Policy

Endpoint Security Platforms

PAM

MFA

Encryption

App Whitelisting

Device Control

Vulnerability Scanning

Tenable

Qualys

Rapid7

CIS

NIST

ISO 27001

PowerShell

Tools

Microsoft Defender

CrowdStrike

SentinelOne

Trellix

Symantec

Tenable

Qualys

Rapid7

Job description

Endpoint Security Engineer / Endpoint & Identity Security Engineer

Location: NYC

Type: Onsite role at NYC client site

LOCAL to Tristate prefer...

Must have: Hardening, AD security, endpoint protection, vulnerability remediation, and automation

We need someone who can strengthen enterprise security by implementing hardening standards, securing Active Directory, and managing endpoint protection across Windows and Linux environments. Maintain CIS‑aligned baselines, enforce GPO‑driven security controls, and support vulnerability remediation using industry‑leading tools. Ensure endpoints, servers, and identities remain compliant, resilient, and securely configured.

Key Focus Areas:

• Active Directory & GPO security governance


• Endpoint protection (Defender, CrowdStrike, SentinelOne, Trellix)


• Vulnerability management (Tenable/Qualys/Rapid7)


• PAM, MFA, encryption, whitelisting & device control


• PowerShell automation for security configuration

Required Skills:

• Windows Server & Active Directory Administration


• CIS Benchmark Hardening (Windows, Linux, endpoints)


• Group Policy (GPO) Security & Governance


• Endpoint Security Platforms: Microsoft Defender, CrowdStrike, SentinelOne, Trellix, Symantec


• Core Security Controls: PAM, MFA, Encryption, Application Whitelisting, Device Control


• Vulnerability Management Tools: Tenable, Qualys, or Rapid7


• Security Frameworks: CIS, NIST, ISO 27001


• PowerShell Automation

Certifications related to work: (any or as many is okay—as these are plus)

• SC‑300 (Identity & Access Administrator)


• AZ‑500 (Azure Security Engineer)


• SC‑200 (Security Operations Analyst)


• CrowdStrike CCFA or Sentinel One SIREN


• Qualys / Tenable / Rapid7 VM Certification