Endpoint Security Engineer

Build More Than Just a Career. Build Your Future. At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders. We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here.

KEY RESPONSIBILITIES Endpoint Detection & Response:
Administer and tune EDR/EPP platforms (e.g., Crowd Strike, Microsoft Defender for Endpoint, Sentinel One) — manage policies, investigate detections, and support response. Privilege & PAM:
Operate and maintain privileged access controls using Beyond Trust (Privilege Management / Endpoint Privilege Management), enforcing least-privilege and managing application elevation policies. PKI & Certificates:
Support PKI operations — certificate issuance, renewal, revocation, and troubleshooting for endpoint authentication, code signing, and encryption use cases. Mobile / Intune:
Manage mobile and modern device security through Microsoft Intune — compliance policies, configuration profiles, app protection, and conditional access integration. Hardening:
Build, apply, and validate endpoint hardening baselines (CIS Benchmarks, DISA STIGs, vendor best practices) across Windows, macOS, and mobile platforms. Vulnerability & Compliance:
Monitor for vulnerabilities and misconfigurations, coordinate remediation, and verify patch and configuration compliance. Collaboration & Documentation:
Document standards, runbooks, and operational procedures; partner with SOC, IT, and infrastructure teams on incidents and escalations. REQUIRED SKILLS & EXPERIENCE 5+ years of hands-on experience in endpoint security, security engineering, or a closely related IT security role. Working proficiency with at least one major EDR/EPP platform, including policy configuration and detection investigation. Practical experience with Beyond Trust privilege management (or a comparable PAM/endpoint privilege solution) and least-privilege enforcement.

Solid understanding of PKI concepts and operational experience with certificate lifecycle management. Experience managing endpoints and mobile devices with Microsoft Intune (compliance, configuration, app protection). Demonstrated experience applying endpoint hardening frameworks such as CIS Benchmarks or DISA STIGs. Strong knowledge of Windows endpoint internals; familiarity with macOS and mobile (iOS/Android) management. Comfortable scripting for automation and reporting (Power Shell preferred;

Python a plus). PREFERRED / NICE TO HAVE

Experience with Microsoft Entra  (Azure AD) and Conditional Access. Familiarity with SIEM/log analysis and integrating endpoint telemetry into detection workflows. Exposure to Group Policy, Configuration Manager (SCCM), or other configuration management tooling. Relevant certifications:
Security+, GCED, GCWN, Microsoft SC-200 / MD-102, Crowd Strike CCFA, or Beyond Trust certifications. Understanding of compliance and regulatory frameworks (NIST 800-53, ISO 27001) as they apply to endpoints. Ready to take the next step? If you’re excited about this role and ready to grow with a team that values ambition, ideas, and impact — we’d love to hear from you.

Apply now and start building your journey with Vailexa.