Endpoint Security & Exposure Engineer

Overview

Endpoint Security & Exposure Management Engineer s role focuses on reducing cyber risk by managing vulnerabilities, strengthening endpoint controls, and improving visibility across a global technology estate.

• Lead vulnerability and exposure management activities, ensuring risks are identified, prioritised, and remediated.
• Work closely with technology teams to drive remediation programmes and reduce organisational cyber risk.
• Support and enhance endpoint security capabilities (application control, allow listing, privilege management, hardening).
• Use data, reporting, and dashboards to provide visibility of cyber exposure and remediation performance.
• Assess emerging vulnerabilities and threats, providing risk‑based recommendations and guidance to stakeholders.
• Act as a trusted security partner across infrastructure, cloud, application, and operational teams.

• Experience in cybersecurity, vulnerability management, security engineering, or endpoint security.
• Strong understanding of risk‑based vulnerability management and remediation prioritisation.
• Experience with vulnerability management platforms (e.g., Tenable, Qualys, Rapid7).
• Experience with Service Now Vulnerability Response or similar remediation workflow platforms.
• Knowledge of endpoint security technologies (application control, privilege management, protection).
• Collaboration and stakeholder engagement skills.
• Ability to translate technical security risks into business outcomes.

• Zero Trust implementation experience.
• Exposure to Microsoft Defender for Endpoint, Intune, Active Directory, Entra .
• Experience in cloud environments (Azure, AWS, GCP).
• Knowledge of frameworks (NIST, ISO 27001, CIS Controls, Cyber Essentials Plus, NCSC CAF).
• Industry certifications (CISSP, CISM, Security+, GIAC, Microsoft Security, Service Now).

• Application control and allow listing technologies.
• Privilege management solutions.
• Endpoint hardening methodologies.
• Zero Trust security principles.
• Least‑privilege administration.
• Endpoint security architecture.
• Vulnerability assessment and management.
• Exposure management practices.
• Risk prioritisation frameworks.
• Attack surface management.
• Patch and remediation management.
• Security risk analysis.
• Microsoft Windows Server, Windows 11, Linux OS.
• Active Directory, Entra , Microsoft Intune.
• Microsoft Defender for Endpoint.
• Cloud platforms (Azure, AWS, GCP).
• Service Now Vulnerability Response.
• Power Shell, Python, API integrations, workflow automation, security reporting and dashboard development.

• Strong analytical and problem‑solving skills.
• Excellent stakeholder management and communication.
• Ability to translate technical risk into business impact.
• Strong organisational and prioritisation skills.
• Collaborative approach to remediation and risk reduction.
• Continuous improvement mindset focused on measurable security outcomes.

• Reduction in privileged access risk.
• Increased endpoint security control coverage.
• Reduction in critical and high‑risk vulnerabilities.
• Improved vulnerability remediation performance and SLA compliance.
• Improved visibility of enterprise cyber exposure.
• Implementation of least‑privilege principles across the endpoint estate.
• Reduction in organisational attack surface and cyber risk.

Jacobs is an equal opportunity employer. We are a disability confident employer and will interview disabled candidates who best meet the criteria. All qualified applicants will receive consideration for employment.