Security Engineer II (Endpoint Security)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Remote in the United States; candidates near offices may choose fully remote work or hybrid work with in-office attendance on Tuesdays and Wednesdays. Occasional business travel is required. Authorization to work in the United States for any employer is required.
Salary: $116,000–$125,000 per year, adjusted by location and based on qualifications, experience, impact, and market data.
Company
is a self-sustaining nonprofit focused on expanding educational and career opportunities through technology and mission-driven work.
What you will do
- Maintain and extend the enterprise application allowlist as software, vendors, device groups, and business needs change.
- Define enforcement tiers and rollout sequencing, and test policy changes before enforcement to minimize business disruption.
- Process software exception requests by validating business justification against defined approval criteria.
- Monitor blocked-install attempts, device coverage, open risks, and emerging software needs.
- Maintain documentation, knowledge bases, checklists, runbooks, and audit records for allowlist decisions and exception handling.
- Collaborate with IT, application owners, business stakeholders, and the security team while participating in planning, standups, retrospectives, audits, and continuous improvement.
Requirements
- 2–4 years of experience in cybersecurity, endpoint security, IT operations, or a related technical role.
- Working knowledge of endpoint management and application control concepts.
- Hands-on experience processing exceptions or access requests against defined criteria, with attention to detail and comfort working with tickets, checklists, and exception workflows.
- Ability to communicate clearly with end users and business stakeholders about software approvals and restrictions.
- Strong organizational and documentation skills, with discipline to keep records accurate and audit-ready.
- Ability and enthusiasm to learn new security tools and technologies.
- Authorization to work in the United States for any employer.
- Clear and concise written and verbal communication, curiosity about emerging technologies, willingness to learn and apply digital tools independently, a learner’s mindset, commitment to growth, data-informed problem solving, and a collaborative and empathetic approach.
Nice to have
- At least 1 year of software or scripting experience with Python, PowerShell, or similar tools for allowlist automation or reporting.
- Experience with endpoint management or application control platforms such as Intune, Tanium, Carbon Black, or AppLocker.
- Exposure to IT service management or ticketing platforms such as ServiceNow.
- Relevant certifications such as Security+ or an endpoint/EDR vendor certification.
- Experience in a regulated or audited environment such as SOX, HIPAA, or PCI.
Culture & Benefits
- Meaningful, mission-driven work focused on expanding educational and career opportunities.
- Supportive, collaborative, and empathetic work environment with emphasis on trust, shared success, feedback, and continuous improvement.
- Fully remote work option, with hybrid work available to employees near offices.
- Fair and transparent compensation adjusted by location and supported by market data.
- Occasional in-person business travel is required.
Hiring process
- Applications are reviewed immediately and accepted for at least five business days, until the position is filled.
- The process generally includes application review, a recruiter phone or video screen, a hiring manager interview, a practical exercise, a panel interview, a leadership conversation, and reference checks.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →