Senior Endpoint Vulnerability Remediation Engineer – Contract

Jobtailor; Arizona; On-site; USD 110,000 - 170,000; Full time

Job summary

Jobtailor is seeking a senior endpoint security engineer to lead vulnerability remediation for Windows and Mac endpoints. The role focuses on designing patch management strategies, implementing remediation workflows, and coordinating with security, infrastructure, and application teams to reduce the attack surface.

The ideal candidate has 5+ years in endpoint or infrastructure security, with hands-on experience in vulnerability tooling, EDR platforms, and scripting to automate detection and

Qualifications

• Bachelor's degree in computer science, cybersecurity, or engineering.
• 5+ years of experience in endpoint management, vulnerability management, or infrastructure/security engineering.
• Experience with endpoint vulnerability management tools such as Rapid7.
• Experience with EDR platforms like CrowdStrike or Defender for Endpoint.
• Proficiency with patch management solutions (SCCM/MECM, Intune, WSUS).
• Knowledge of Windows and Mac endpoint administration and hardening.
• Familiarity with CIS benchmarks security configuration standards.
• Understanding of TCP/IP, DNS, ports, and firewalls related to remediation.
• Scripting/automation experience (PowerShell, Python, Bash).
• Strong security principles including encryption protocols and endpoint protection.

Responsibilities

• Drive endpoint vulnerability remediation efforts, including identification, prioritization, and resolution of vulnerabilities across Windows and Mac.
• Design and implement patch management and vulnerability remediation strategies, ensuring timely deployment and compliance with organizational SLAs.
• Partner with Security, Infrastructure, and Application teams to assess risk, validate remediation actions, and reduce overall attack surface.
• Create and maintain policies, standards, and technical documentation related to endpoint security, patching, and vulnerability management.
• Develop and maintain dashboards and reporting to track vulnerability posture, remediation progress, and risk reduction metrics.
• Represent Workplace Technology in Technology Review Boards, ensuring security best practices and consistent methodologies are applied.
• Work closely with internal teams and external vendors to resolve vulnerabilities in a timely manner, including driving escalations and ensuring SLA adherence.
• Participate in incident, problem, and change management processes as they relate to endpoint vulnerabilities and security risks.
• Support automation of vulnerability detection and remediation using scripting and DevOps practices.

Education

Bachelor's degree in computer science

Bachelor's degree in cybersecurity

Bachelor's degree in engineering

Tools

Rapid7

CrowdStrike

Defender for Endpoint

SCCM/MECM

Intune

WSUS

Job description

Responsibilities

• Drive endpoint vulnerability remediation efforts, including identification, prioritization, and resolution of vulnerabilities across Windows and Mac.
• Design and implement patch management and vulnerability remediation strategies, ensuring timely deployment and compliance with organizational SLAs.
• Partner with Security, Infrastructure, and Application teams to assess risk, validate remediation actions, and reduce overall attack surface.
• Create and maintain policies, standards, and technical documentation related to endpoint security, patching, and vulnerability management.
• Develop and maintain dashboards and reporting to track vulnerability posture, remediation progress, and risk reduction metrics.
• Represent Workplace Technology in Technology Review Boards, ensuring security best practices and consistent methodologies are applied.
• Work closely with internal teams and external vendors to resolve vulnerabilities in a timely manner, including driving escalations and ensuring SLA adherence.
• Participate in incident, problem, and change management processes as they relate to endpoint vulnerabilities and security risks.
• Support automation of vulnerability detection and remediation using scripting and DevOps practices.

Requirements

• Bachelor's degree in computer science, cybersecurity, or engineering
• Minimum of 5+ years of experience in endpoint management, vulnerability management, or infrastructure/security engineering
• Proven experience with Endpoint vulnerability management tools (e.g., Rapid7)
• Experience with Endpoint detection and response (EDR) platforms (e.g., CrowdStrike, Defender for Endpoint)
• Proficiency in Patch management solutions (e.g., SCCM/MECM, Intune, WSUS)
• Working knowledge of Operating systems: Windows and Mac endpoint administration and hardening
• Familiarity with Security configuration standards (e.g., CIS benchmarks)
• Understanding of Network fundamentals (TCP/IP, DNS, ports, firewalls) as they relate to vulnerability remediation
• Experience in Scripting/automation (e.g., PowerShell, Python, Bash)
• Strong understanding of security principles, including encryption protocols and endpoint protection

Certifications & Qualifications

• Bachelor's degree in computer science
• Bachelor's degree in cybersecurity
• Bachelor's degree in engineering