Zero-Trust Endpoint Security Architect

Jacobs; Chicago (IL); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Stock purchase program

Paid time off

Public holidays

Caregiver leave

Job summary

Jacobs is seeking an Endpoint Security & Exposure Management Engineer to design, implement, and optimize endpoint security controls and vulnerability programs across Windows, Linux, and macOS, aligning with Zero Trust and least-privilege models. You will drive remediation with cross‑functional teams and establish metrics for executive reporting.

The role covers exposure management, vulnerability lifecycle governance, and security operations, with a focus on reducing organizational cyber risk and

Qualifications

• Minimum 5 years of experience in cybersecurity, endpoint security, vulnerability management, or security engineering.
• Hands-on experience administering application control and privilege management solutions.
• Extensive experience managing enterprise vulnerability management programs.
• Experience working with ServiceNow Vulnerability Response.
• Experience with Rapid7, Tenable, or Qualys in large enterprise environments.
• Strong understanding of risk-based vulnerability management and remediation prioritization.

Responsibilities

• Design, implement, and maintain endpoint security controls across Windows, Linux, and macOS environments.
• Administer application control and allowlisting solutions.
• Develop privilege management policies based on Zero Trust and least-privilege principles.
• Investigate and resolve endpoint security issues related to policy enforcement and privilege elevation.
• Collaborate with desktop engineering teams on secure endpoint standards and configurations.
• Manage the vulnerability management lifecycle across on-premises, cloud, and hybrid environments.
• Analyze findings, prioritize remediation, and drive actions with cross-functional teams.

Skills

Endpoint security architecture

Zero Trust

Least-privilege administration

Risk-based vulnerability management

Security reporting

Tools

ServiceNow Vulnerability Response

Microsoft Defender for Endpoint

Active Directory

Intune

Azure/AWS/Google Cloud

Job description

Jacobs is seeking an Endpoint Security & Exposure Management Engineer to design, implement, and optimize endpoint security controls and vulnerability programs across Windows, Linux, and macOS, aligning with Zero Trust and least-privilege models. You will drive remediation with cross‑functional teams and establish metrics for executive reporting.

The role covers exposure management, vulnerability lifecycle governance, and security operations, with a focus on reducing organizational cyber risk and