Security Engineer - Endpoint Vulnerability Management

Join a world-class team of skilled engineers who build creative digital solutions to support our colleagues and clients. We make a broad organizational impact by delivering cutting-edge technology solutions that power Gartner. Gartner IT values its culture of nonstop innovation, an outcome-driven approach to success, and the notion that great ideas can come from anyone on the team.

Gartner is seeking a Security Engineer to strengthen vulnerability management and endpoint security across associate devices. This role assesses and prioritizes vulnerabilities, coordinates and validates remediation, supports the Elevated Privilege Management platform, and evaluates software to ensure only approved applications are installed and executed. The engineer also contributes to reporting, documentation, automation, and endpoint configuration reviews while building hands-on expertise in vulnerability management, endpoint protection, and enterprise security technologies.

• Monitor, triage, and prioritize endpoint vulnerabilities by risk and business impact.
• Coordinate and track remediation, escalating high-risk issues, reporting status, and validating corrective actions.
• Support and improve Gartner’s Elevated Privilege Management platform.
• Assess software risks and business needs, and maintain controls that permit only approved applications.
• Review endpoint configurations to identify security gaps and strengthen controls.
• Develop security metrics, reports, risk updates, and supporting documentation.
• Automate recurring security analysis, reporting, validation, and endpoint processes.
• Partner across teams to advance vulnerability and endpoint security while staying current on threats and technologies.

• 2+ years of experience in cybersecurity, vulnerability management, endpoint security, or a related field.
• Experience prioritizing vulnerabilities, coordinating remediation, and validating completion based on risk and business impact.
• Knowledge of endpoint protection, vulnerability scanning, application control, software inventory, configuration management, and Windows security.
• Ability to assess software risk, including reputation, permissions, dependencies, vulnerabilities, and business need.
• Strong communication skills, with the ability to explain technical risks and actions to varied audiences.
• Detail-oriented and able to manage priorities, maintain documentation, collaborate across teams, and drive remediation to completion.

• Strong analytical skills and ability to prioritize risks in complex environments.
• Experience supporting elevated privilege, privileged access, or endpoint privilege management platforms.
• Experience managing enterprise software allow lists or application execution controls.
• Experience using Power Shell, Python, SQL, query languages, or similar tools to automate security operations and reporting.
• Knowledge of security frameworks such as CIS Controls or the NIST Cybersecurity Framework.

Passionate about cybersecurity and continuous learning. Curious, self-motivated, and eager to develop new technical skills. A collaborative team player who enjoys working across multiple technical disciplines. Able to balance technical detail with business priorities. Comfortable taking ownership of tasks and driving them to completion.

• Competitive compensation.
• Limitless growth and learning opportunities.
• Ongoing mentorship and apprenticeship;
  Leadership courses, development programs, technical courses, certification opportunities and more!
• A collaborative and positive culture - join a diverse team of professionals that are as smart and driven as you.
• A chance to make an impact – your work will…