Senior Endpoint Security EngineerActive$146K
The opportunity
We are looking for a Senior Endpoint Security Engineer with deep expertise across Windows, macOS, and Linux environments to lead and mature our endpoint security programme. You will be responsible for the design, deployment, and continuous improvement of our endpoint protection,…
What you'll do
Define, implement, and enforce endpoint security baselines and hardening: standards across Windows, macOS, and Linux platforms in alignment with CIS Benchmarks, NIST guidelines, and organisational policy.
Deploy, manage, and tune Endpoint Detection and Response (EDR) solutions: (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or equivalent) across all device types.
Implement and maintain antivirus, anti-malware, host-based firewall,: application allowlisting/blocklisting, and data loss prevention (DLP) controls.
Conduct regular endpoint vulnerability assessments and drive timely: remediation in coordination with IT and asset owners.
Manage full-disk encryption across platforms: BitLocker (Windows), FileVault (macOS), and LUKS/dm-crypt (Linux).
Architect, deploy, and manage enterprise MDM solutions: including Jamf Pro (macOS/iOS), Microsoft Intune, VMware Workspace ONE, or equivalent platforms — across the organisation's full device fleet.
What they're looking for
- Design and enforce MDM enrolment workflows, device compliance policies,: configuration profiles, and conditional access rules.
- Manage application lifecycle through MDM: packaging, deployment, patching, and removal across managed endpoints.
- Define and maintain device compliance baselines; integrate MDM compliance: signals with identity and access management (IAM) and Zero Trust frameworks.
- Oversee BYOD and corporate-owned device policies, ensuring appropriate: segregation of personal and corporate data.