Sr. Endpoint Vulnerability Remediation Engineer

A well-established enterprise organization is hiring an Endpoint Vulnerability Engineer to support its hybrid environment in Michigan. This is a full-time opportunity working in a mixed Windows and macOS environment, leveraging tools such as Rapid7, Crowd Strike or Defender for Endpoint, and SCCM or Intune.

This is an opportunity for someone who enjoys balancing hands-on technical execution with process and strategy. The role is ideal for an engineer who wants to take ownership of vulnerability remediation across endpoint systems while helping improve how risk is measured, prioritized, and reduced  position offers exposure across multiple teams and the chance to influence how endpoint security is handled enterprise-wide.

• 5 plus years of experience in endpoint management, security engineering, or vulnerability management
• Strong experience with vulnerability scanning tools such as Rapid7
• Hands-on experience with EDR platforms such as Crowd Strike or Defender for Endpoint
• Experience with patch management tools including SCCM, MECM, Intune, or WSUS
• Strong knowledge of Windows and macOS administration and security hardening
• Experience with scripting such as Power Shell, Python, or Bash
• Understanding of network fundamentals including TCP IP, DNS, and firewall concepts
• Experience prioritizing and remediating vulnerabilities based on risk

• Experience with reporting tools such as Power BI or Splunk
• Experience integrating security workflows with systems like Service Now
• Familiarity with CIS benchmarks or other configuration standards
• Relevant certifications such as Security plus, CISSP, or CEH
• Experience building automation for remediation workflows

• Leading vulnerability remediation efforts across endpoint systems
• Designing and improving patch management processes
• Partnering with security and infrastructure teams to reduce risk
• Developing reporting and dashboards to track remediation progress
• Supporting automation initiatives for detection and remediation

40 percent endpoint vulnerability and patch tools
30 percent operating systems and endpoint configuration
30 percent scripting, automation, and reporting

50 percent hands-on technical work
20 percent strategy and process improvement
30 percent cross-team collaboration

Competitive salary with bonus eligibility

• Medical
• Dental
• Vision
• Paid vacation and holidays
• Retirement plan options

Applicants must be currently authorized to work in the U.S. on a full-time basis now and in the future.