Security & Endpoint Engineer

Details

• Evaluate and perform proof-of-concept testing for browser extension security platforms.
• Assess browser extensions, developer plugins, and AI-enabled tools for security and
• Define extension governance, approval workflows, and allowlisting processes.
• Implement monitoring, reporting, and visibility capabilities.
• Support enforcement controls to prevent unauthorized extension usage and reduce data
• Develop operational processes, documentation, and support models for ongoing
• Support enterprise endpoint security initiatives across macOS, Windows & Linux
• Implement and maintain endpoint security controls and hardening standards.
• Assist with vulnerability remediation and endpoint compliance activities.
• Support Zero Trust and device trust initiatives.
• Partner with endpoint engineering teams to balance security requirements with user
• Support implementation and operational management of PAM solutions such as Delinea.
• Assist with privileged account governance, access reviews, and least-privilege initiatives.
• Partner with Security and Identity teams to strengthen administrative access controls.
• Participate in security assessments, audits, and compliance programs.
• Produce operational documentation, runbooks, and implementation guides.
• Track remediation activities, risk exceptions, and security metrics.
• Support audit readiness and evidence collection activities.
• Develop automation and scripts to improve security operations and reduce manual effort.
• Integrate security tools with enterprise platforms and workflows.
• Build dashboards and reporting capabilities to improve visibility and operational
• Work closely with Security, CorpFleet, Infrastructure, and Identity teams.
• Participate in vendor evaluations, proof-of-concepts, and implementation planning.
• Present technical recommendations, findings, and project status updates to
• 5–8 years of experience in Security Engineering, Endpoint Engineering, Systems
• Strong understanding of endpoint security principles and enterprise device management.
• Experience supporting macOS and Windows environments at scale.
• Experience with browser security, extension governance, and endpoint security tooling.
• Experience with endpoint management tools such as Jamf, Intune, FleetDM, or similar
• Understanding of Zero Trust security principles and least-privilege access models.
• Strong scripting skills using Python, PowerShell, Bash, or similar technologies.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong written and verbal communication skills.
• Experience with browser extension security platforms such as KOI Security, LayerX,
• Experience with Privileged Access Management platforms such as Delinea, CyberArk, or
• Experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, or
• Familiarity with enterprise security technologies including Okta, Zscaler, and Microsoft
• Experience supporting SOC 2, ISO 27001, NIST, or similar security frameworks.
• Understanding of AI security risks, browser-based AI tools, and governance controls.
• Successful evaluation and recommendation of browser extension security tooling.
• Deployment and operationalization of approved extension security controls.
• Improved visibility into browser extension usage across the environment.
• Implementation of governance, allowlisting, and enforcement processes.
• Contribution to broader endpoint security and PAM initiatives.
• Creation of sustainable documentation, runbooks, and operational procedures.