Endpoint Security Engineer Job at Myticas Consulting (Lemont)

Endpoint Security Engineer

Myticas Consulting

Location:
United States , Lemont

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

BIS-EE is seeking a full-time Endpoint Security Engineer to assist in improving our endpoint cyber hygiene and vulnerability management program in collaboration with the CSPO. The Endpoint Security Engineer (contractor) will be embedded within the endpoint engineering team (3 Windows engineers, 2 macOS engineers) to enhance security operations and strengthen the security posture of client workstations.

Job Responsibility:

Identify, analyze, and prioritize endpoint vulnerabilities using tools such as Tenable, Axonius, Jamf Pro, SCCM, Intune, Active Directory, and Entra
Assess environmental and operational factors that may impact remediation feasibility and timelines
Provide risk-based recommendations to improve the vulnerability management program
Develop, test, and deploy remediation scripts and configurations for Windows and macOS endpoints using tools such as Jamf, ConfigMgr/SCCM, Intune, and Group Policy
Write clear, maintainable scripts and automation (e.g., modular logic, meaningful naming, basic error handling and logging) that can be reused by the team
Document scripts and configurations with purpose, parameters, usage instructions, and any security considerations to support troubleshooting and cross-team adoption
Maintain an organized library of remediation artifacts
if applicable, help establish and use a version-controlled repository (e.g., Git) to track changes and support basic peer review
Contribute to secure baseline configurations aligned with Argonne CSPP, NIST 800-53 Rev 5, CIS Benchmarks, Microsoft Security Baselines, DISA STIGs, and/or macOS Security Compliance Project
Assist in development, testing, implementation, documentation of baseline configurations
Monitor baseline implementation for coverage, effectiveness, unapproved deviations, and required changes
Participate in regular team meetings to provide status updates, propose improvements, and discuss implementation strategies
Monitor endpoint compliance and provide reports on remediation effectiveness and baseline configurations to leadership and stakeholders

Requirements:

Endpoint Management Platform Expertise: Hands-on experience with SCCM (System Center Configuration Manager), Jamf Pro, and/or Microsoft Intune for managing and securing Windows and macOS endpoints in an enterprise environment
Vulnerability Management & Analysis: Proven ability to identify, analyze, and remediate endpoint vulnerabilities using tools like Tenable, Axonius, and native platform tools (Jamf, SCCM, Intune), with knowledge of frameworks such as NIST 800-53 and CIS Benchmarks
Scripting & Automation Proficiency: Strong scripting skills in PowerShell, Bash, and/or Python, with experience developing modular, reusable, and secure automation for endpoint remediation and configuration management
Secure SDLC & Documentation Practices: Experience with secure software development lifecycle (SDLC) practices, version control (Git), and creating clear documentation for scripts, configurations, and remediation procedures to ensure maintainability and cross-team adoption
Security Framework & Compliance Knowledge: Understanding of NIST 800-53 Rev 5, CIS Benchmarks, DISA STIGs, and Microsoft Security Baselines, with the ability to implement and monitor secure baseline configurations aligned with organizational and regulatory standards
Endpoint Management: Hands-on expertise with SCCM, Jamf Pro, and/or Microsoft Intune for Windows and macOS endpoints
Experience packaging and deploying applications, security updates, and scripts across enterprise platforms
Familiarity with Group Policy and Intune for configuration management
Secure Coding & SDLC Practices: Proficiency in automation scripting (PowerShell, Bash, Python) with emphasis on modular, reusable, and secure code
Strong grasp of SDLC principles: requirements gathering, design, implementation, testing, deployment, and maintenance
Experience with version control systems (Git) and collaborative development workflows (branching, pull requests, peer review)
Ability to document code and remediations clearly for cross-team adoption and knowledge transfer
Security Frameworks & Compliance: Knowledge of CVE program, NIST Vulnerability Database, CISA Known Exploited Vulnerability Database, and overall vulnerability management processes
Experience implementing NIST 800-53 Rev 5, CIS Benchmarks, DISA STIGs, Microsoft Security Baselines, and macOS Security Compliance Project
Ability to translate technical fixes into measurable improvements in endpoint security posture
Experience using Tenable.SC or Tenable.VM as part of vulnerability management
Soft Skills: Strong problem-solving skills with a focus on reducing organizational risk
Effective communication skills to convey technical concepts to both technical and non-technical stakeholders
Collaborative mindset for working within a mixed Windows/macOS engineering team
Must be a US Citizen
3–5 years of experience in complex large enterprise environments

Additional Information:

Job Posted:
March 03, 2026

Employment Type:

Fulltime

Work Type:

Remote work

Myticas Consulting - All Job Offers

Job Link Share: