Endpoint Security & Exposure Engineer; Cyber Security

At Jacobs, we’re challenging today to reinvent tomorrow by solving the world’s most critical problems for thriving cities, resilient environments, mission‑critical outcomes, operational advancement, scientific discovery and cutting‑edge manufacturing, turning abstract ideas into realities that transform the world for good.

As the Endpoint Security & Exposure Management Engineer
, you design, implement, administer, and continuously improve endpoint security controls and enterprise exposure management capabilities, focusing on reducing organizational cyber risk through effective application control, privilege management, vulnerability management, and remediation governance.

• Design, implement, and maintain endpoint security controls across Windows, Linux, and macOS environments.
• Administer and optimize application control and application allow listing solutions.
• Develop and maintain privilege management policies based on Zero Trust and least‑privilege principles.
• Investigate and resolve endpoint security issues related to application execution, privilege elevation, and policy enforcement.
• Collaborate with desktop engineering teams to develop secure endpoint standards and configurations.
• Support endpoint hardening initiatives aligned with industry best practices and security frameworks.
• Develop reporting and metrics to demonstrate endpoint security effectiveness and risk reduction.

• Manage the enterprise vulnerability management lifecycle, including identification, assessment, prioritization, remediation, and validation.
• Administer vulnerability scanning and assessment platforms across on‑premises, cloud, and hybrid environments.
• Analyze vulnerability findings and prioritize remediation activities based on risk, exploitability, asset criticality, and business impact.
• Drive remediation efforts with infrastructure, application, cloud, and operations teams.
• Monitor remediation performance against defined service level objectives and security policies.
• Perform vulnerability trend analysis and identify recurring risk patterns.
• Support attack surface reduction initiatives through proactive exposure identification and mitigation.
• Administer and maintain Service Now Vulnerability Response.
• Configure integrations between Service Now and vulnerability assessment platforms.
• Develop and optimize vulnerability workflows, assignment rules, remediation tasks, and reporting.
• Monitor remediation progress and ensure effective stakeholder engagement.
• Create dashboards and executive‑level reporting to communicate exposure trends and remediation performance.

• Support security incident investigations involving vulnerable systems, unauthorized privilege use, or endpoint compromise.
• Assess emerging vulnerabilities, threats, and security advisories to determine organizational impact.
• Provide risk‑based recommendations for remediation and compensating controls.
• Participate in security assessments, audits, and compliance activities.
• Contribute to cybersecurity standards, policies, and technical security roadmaps.
• Act as a technical advisor for endpoint security and vulnerability management initiatives.

• Application control and allow listing technologies
• Privilege management solutions
• Endpoint hardening methodologies
• Zero Trust security principles
• Least‑privilege administration
• Endpoint security architecture

• Vulnerability assessment and management
• Exposure management practices
• Risk prioritization frameworks
• Attack surface management
• Patch and remediation management
• Security risk analysis

• Microsoft Windows Server and Windows 11
• Linux operating systems
• Active Directory and Entra
• Microsoft Intune
• Microsoft Defender for Endpoint
• Cloud platforms (Azure, AWS, or Google Cloud)
• Service Now Vulnerability Response

• Power Shell
• Python
• API integrations and workflow automation
• Security reporting and dashboard development

• Minimum 5 years of experience in cybersecurity, endpoint security, vulnerability management, or security engineering.
• Hands…