Security Engineer II (Endpoint Security)

Fully remote work across the United StatesFull-TimeMiddle

SalaryExpected salary range of $116,000–$125,000, depending on location, relevant experience, qualifications, and market considerations.

Apply NowOpens the employer's application page

Job Details

Experience: 2–4 years of experience in cybersecurity, endpoint security, IT operations, or a related technical field. Preferred: At least one year of software development or scripting experience.
Required Skills: PythonServiceNow

Have 2–4 years of experience in cybersecurity, endpoint security, IT operations, or a related technical field.
Have working knowledge of endpoint management, application control, and software allowlisting across managed devices.
Have hands-on experience reviewing and processing exceptions or access requests against defined criteria.
Be familiar with structured workflows, ticketing systems, checklists, and approval procedures.
Be able to investigate blocked software installations, identify coverage gaps, assess policy effectiveness, and recommend corrective actions.
Maintain accurate records and documentation with attention to detail and audit readiness.
Be able to explain software restrictions, approval decisions, and security requirements to end users and business stakeholders.
Follow established security standards, manage exception workflows consistently, and prioritize requests.
Preferred: Have at least one year of software development or scripting experience using Python, PowerShell, or similar languages.
Preferred: Have experience with Microsoft Intune, Tanium, Carbon Black, or AppLocker.
Preferred: Be familiar with IT service management and ticketing platforms such as ServiceNow.
Preferred: Hold CompTIA Security+ or an endpoint security or EDR vendor certification.
Preferred: Have experience in regulated or audited environments, including SOX, HIPAA, or PCI.

Maintain and expand application allowlisting policies for managed endpoints as software, vendors, and business requirements change.
Define enforcement tiers, rollout strategies, and sequencing for new device groups and business units.
Test and validate policy changes before deployment to minimize disruption and maintain reliable enforcement.
Track endpoint coverage, blocked software installations, outstanding risks, and policy effectiveness.
Review software exception requests against established criteria, document decisions, and escalate when necessary.
Monitor blocked-install attempts to identify restrictive policies, missing approvals, and allowlisting gaps.
Maintain knowledge-base documentation, procedures, checklists, and runbooks in an audit-ready state.
Conduct audits and spot checks, identify inconsistencies, and support corrective actions.
Collaborate with IT teams, application owners, and business stakeholders to resolve operational challenges and improve workflows.
Identify and contribute to scripting and automation for allowlist management, reporting, and exception handling.

View Full Description & ApplyYou'll be redirected to the employer's site