Security Engineer 5, Workforce Security

What you'll do

• Design, implement, and validate protective endpoint security controls for Mac, Windows, and Linux systems.
• Develop and execute a comprehensive Patch and Vulnerability Management Strategy across OS and application levels.
• Identify and manage risks associated with all software on company endpoints.
• Perform host hardening to prevent configuration drift and maintain defined security standards.
• Apply threat intelligence to prioritize the remediation of identified endpoint vulnerabilities.
• Evaluate build vs. buy options for security capabilities through requirement gathering and cost-benefit analysis.
• Translate complex technical risks into clear business risks for stakeholders to inform decision-making.
• Provide operational support for Workforce Security and participate in incident response as needed.

What we're looking for

• Knowledge of commercially available endpoint MDM solutions such as Jamf, Kandji, or Intune.
• Working experience with commercially available endpoint vulnerability scanning tools such as CrowdStrike or Tenable.
• Experience designing and testing host hardening configurations for at least two major operating systems (Mac, Windows, Linux).
• Understanding of Vulnerability Management practices.
• Threat Modeling competency to influence control right-sizing and prioritization efforts.
• Ability to validate publicly disclosed exploits and perform variant analysis.
• Ability to script using tools or GenAI.
• High-level familiarity with corporate security tooling in endpoint, identity, data, and vendor security areas.