Windows Client Security Specialist at Lincoln Electric in Cleveland, Ohio

Windows Client Security Specialist

Lincoln Electric is a high-performance industrial machinery and technology leader who helps customers manufacture and maintain vital equipment and infrastructure. Lincoln Electric's innovative solutions enable higher quality and productivity across a variety of processes including welding, cutting, brazing, machining, process automation, and field repair. The Company leverages proprietary technologies and expertise in materials science, power electronics, automation, and intelligent software to help customers build better and achieve resilience in their operations.

Headquartered in Cleveland, Ohio, Lincoln Electric is the essential 'Linc' that keeps the economy running. The Company operates 71 manufacturing and automation facilities across 20 countries and serves customers in over 160 countries.

Location:

Euclid - 22801

The Windows Client Security Specialist is responsible for the day-to-day operational security of Windows endpoints across the enterprise. This role focuses on monitoring, maintaining, and improving the endpoint security posture through effective use of security tools, consistent application of security baselines, timely patching, and strong collaboration with IT and Cybersecurity teams. The specialist ensures endpoints remain compliant, protected, and resilient by executing operational security processes and leading small-to-medium sized endpoint security initiatives and projects while responding to threats in real time.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent work experience.
• Minimum of 10 years of hands‑on technical experience in a similar endpoint security, Windows client security, or desktop engineering role within a medium-to-large enterprise environment.
• Experience in operational endpoint security, IT security operations, or Windows administration in a medium-to-large enterprise environment.
• Experience with industry‑standard endpoint management and security tools such as Microsoft Intune, Manage Engine, or similar platforms, including policy deployment, compliance monitoring, and configuration troubleshooting.
• Operational familiarity with Microsoft Defender for Endpoint, including alert triage, threat investigation, and remediation workflows.
• Strong working knowledge of Windows 11 configuration, hardening practices, registry management, and endpoint security troubleshooting.
• Understanding vulnerability remediation, patching processes, and compliance validation.
• Ability to investigate and resolve endpoint security issues efficiently in a fast‑paced operational environment.
• Demonstrated experience leading small-to-medium sized IT or security projects, including planning, execution, coordination, and status reporting.
• Strong organizational and documentation skills with an emphasis on consistency, accountability, and delivery.
• Clear written and verbal communication skills with the ability to collaborate effectively across IT and Cybersecurity teams.

• Perform daily operational tasks to maintain the security and compliance of all Windows client endpoints.
• Administer and support endpoint management platforms (Intune, Manage Engine, or similar) to ensure successful deployment of security configurations, updates, and applications.
• Maintain and apply Windows security baselines, GPO settings, and Intune compliance policies to ensure consistent device hardening.
• Respond to Microsoft Defender for Endpoint alerts, investigate endpoint‑level threats, and coordinate remediation steps with Cybersecurity and IT Operations.
• Conduct vulnerability and patch compliance checks; coordinate remediation activities to close security gaps.
• Track and report on endpoint health, patch status, security compliance, and configuration drift.
• Support operational execution of Zero Trust requirements, including Conditional Access enforcement and device compliance validation.
• Troubleshoot security‑related endpoint issues such as Bit Locker encryption failures, agent health issues, and policy misalignment.
• Perform routine audits of device inventory, baseline adherence, application versions, and policy…