Zero-Trust Endpoint Security & Exposure Engineer

Jacobs; Dallas (TX); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Health and welfare benefits

401(k) plan

Stock options

Unlimited PPTO for exempt employees

Job summary

Jacobs is seeking an Endpoint Security & Exposure Management Engineer to design, implement, and improve controls across Windows, Linux, and macOS, with a focus on reducing cyber risk through Zero Trust and privileged access governance.

Responsibilities include managing vulnerability lifecycles, performing risk-based remediation, and driving security program improvements across IT and cloud environments. Strong scripting and reporting skills are required.

Qualifications

• Minimum 5 years of experience in cybersecurity, endpoint security, vulnerability management, or security engineering.
• Hands-on experience administering application control and privilege management solutions.
• Extensive experience managing enterprise vulnerability management programs.
• Experience working with ServiceNow Vulnerability Response.
• Experience using leading vulnerability management platforms such as Rapid7, Tenable, Qualys.

Responsibilities

• Design, implement, and maintain endpoint security controls across Windows, Linux, and macOS.
• Administer and optimize application control and allowlisting solutions.
• Develop and maintain privilege management policies based on Zero Trust and least-privilege principles.
• Investigate and resolve endpoint security issues related to application execution, privilege elevation, and policy enforcement.
• Collaborate with desktop engineering teams to develop secure endpoint standards and configurations.
• Support endpoint hardening initiatives aligned with security frameworks and best practices.
• Develop reporting and metrics to demonstrate endpoint security effectiveness and risk reduction.
• Manage the enterprise vulnerability management lifecycle from identification to remediation.
• Administer vulnerability scanning across on-premises, cloud, and hybrid environments.
• Analyze findings and prioritize remediation by risk and business impact.

Skills

Application control

Privilege management

Zero Trust

Least-privilege administration

Endpoint security architecture

PowerShell

Python

Security reporting

Tools

Microsoft Defender for Endpoint

Microsoft Intune

Active Directory

Entra ID

ServiceNow Vulnerability Response

Rapid7

Tenable

Qualys

Azure/AWS/Google Cloud

Job description

Jacobs is seeking an Endpoint Security & Exposure Management Engineer to design, implement, and improve controls across Windows, Linux, and macOS, with a focus on reducing cyber risk through Zero Trust and privileged access governance.

Responsibilities include managing vulnerability lifecycles, performing risk-based remediation, and driving security program improvements across IT and cloud environments. Strong scripting and reporting skills are required.