Senior Endpoint Security Engineer – Automation & Remediation

Fisher Investments; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Fisher Investments is seeking a Senior Operations Engineer to lead endpoint vulnerability management and remediation across Windows environments. You will drive risk reduction, establish hardening baselines, and implement automation using PowerShell, Intune, MECM/SCCM, and Power BI-based dashboards.

You will collaborate with Cybersecurity, Digital Workplace, and Infrastructure teams, mentoring engineers and ensuring remediation success.

Qualifications

• 7+ years of experience in endpoint engineering, vulnerability management, or endpoint security.
• Strong expertise supporting Windows 10 and Windows 11 environments.
• Hands-on experience with Microsoft Intune or MECM/SCCM.
• Experience with vulnerability management platforms such as Tenable, Microsoft Defender Vulnerability Management, or similar tools.
• Experience with CVEs, CVSS scoring, security baselines, hardening standards, and patch remediation processes.
• Advanced PowerShell scripting and automation experience.
• Experience creating reports/dashboards using Power BI, SQL, Excel, or similar tech.
• Familiarity with AI tools and emerging AI technologies.

Responsibilities

• Lead enterprise endpoint vulnerability management activities.
• Prioritize vulnerabilities based on CVSS scores, exploitability, growth, and risk.
• Coordinate remediation efforts for high-risk findings.
• Manage vulnerability remediation SLAs and aging metrics.
• Respond to zero-day vulnerabilities and new security threats.
• Develop and maintain endpoint security standards and hardening baselines.
• Implement CIS Benchmarks, Microsoft Security Baselines, and best practices.
• Reduce endpoint attack surface via configuration management and controls.
• Oversee patching for Windows OS and third-party apps.
• Design PowerShell scripts and automation solutions for remediation.
• Build detection, monitoring, and compliance workflows.

Skills

Endpoint engineering

Vulnerability management

Endpoint security

PowerShell scripting

Automation

Reporting dashboards

AI tools familiarity

Tools

Intune

MECM/SCCM

Tenable

Microsoft Defender Vulnerability Management

Power BI

SQL

Excel

Job description

Fisher Investments is seeking a Senior Operations Engineer to lead endpoint vulnerability management and remediation across Windows environments. You will drive risk reduction, establish hardening baselines, and implement automation using PowerShell, Intune, MECM/SCCM, and Power BI-based dashboards.

You will collaborate with Cybersecurity, Digital Workplace, and Infrastructure teams, mentoring engineers and ensuring remediation success.