Security Engineer II (Endpoint Security)

Accountabilities

Application Allowlisting Policy Engineering: Maintain and expand application allowlisting policies to ensure that only authorized software can execute on managed endpoints. Update the allowlist as software, vendors, and business requirements evolve, keeping security controls accurate, effective, and aligned with operational needs.
Policy Deployment and Enforcement: Define and adjust enforcement tiers, rollout strategies, and implementation sequencing as new device groups and business units adopt endpoint security controls. Test and validate policy changes before deployment to minimize disruption to business operations and maintain reliable security enforcement.
Coverage and Risk Monitoring: Track and report on endpoint coverage, blocked software installations, outstanding risks, and policy effectiveness. Analyze operational data to identify gaps in protection, emerging software requirements, and opportunities to strengthen application control.
Software Exception Management: Review and process incoming software exception requests, assessing business justifications against established approval criteria. Ensure requests are handled consistently, documented accurately, and escalated when necessary.
Application and Vendor Updates: Maintain the application allowlist as new approved software, vendor updates, and changing business requirements arise. Monitor blocked-install attempts to identify overly restrictive policies, missing approvals, and potential gaps in the allowlisting process.
Documentation and Knowledge Management: Build and maintain a knowledge base of allowlist decisions, exception precedents, operational procedures, checklists, and runbooks. Ensure documentation remains accurate, consistent, and audit-ready to support efficient decision-making and repeatable processes.
Audit and Compliance Support: Conduct periodic audits and spot checks to verify adherence to application allowlisting policies and the completeness of exception documentation. Identify inconsistencies and support corrective actions to improve control effectiveness and compliance.
Team Collaboration and Process Improvement: Participate in team planning sessions, stand-ups, and retrospectives. Collaborate with IT, application owners, and business stakeholders to resolve operational challenges, refine workflows, and improve the efficiency of endpoint security operations.
Automation and Operational Efficiency: Identify opportunities to use scripting and automation to streamline allowlist management, reporting, and exception handling. Contribute to continuous improvement initiatives that reduce manual effort while maintaining reliable security controls.
Continuous Technical Development: Expand endpoint security expertise through hands-on policy engineering, collaboration with cross-functional teams, and ongoing learning about emerging security technologies and best practices.
Requirements
Professional Experience: 2–4 years of experience in cybersecurity, endpoint security, IT operations, or a related technical field.
Endpoint Security Knowledge: Working knowledge of endpoint management, application control, and software allowlisting concepts, including the importance of controlling software execution across managed devices.
Exception and Access Request Management: Hands-on experience reviewing and processing exceptions or access requests against defined criteria. Familiarity with structured workflows, ticketing systems, checklists, and approval procedures is important.
Analytical and Problem-Solving Skills: Ability to investigate blocked software installations, identify gaps in application coverage, assess policy effectiveness, and recommend appropriate corrective actions.
Documentation and Organizational Skills: Strong organizational abilities and attention to detail, with the discipline to maintain accurate records, document decisions, and ensure that operational processes remain audit-ready.
Communication and Stakeholder Management: Clear written and verbal communication skills, including the ability to explain software restrictions, approval decisions, and security requirements to end users and business stakeholders.
Process Discipline and Accountability: Ability to follow established security standards, manage exception workflows consistently, prioritize requests, and maintain reliable operational records.
Learning and Adaptability: A proactive approach to learning new security tools and technologies, experimenting with improved workflows, and adapting to changing business and technical requirements.
Scripting and Automation — Preferred: At least one year of software development or scripting experience using Python, PowerShell, or similar languages to automate allowlist administration, exception handling, or reporting.
Endpoint Security Platforms — Preferred: Experience with endpoint management or application control platforms such as Microsoft Intune, Tanium, Carbon Black, or AppLocker.
IT Service Management — Preferred: Familiarity with IT service management and ticketing platforms such as ServiceNow.
Certifications — Preferred: Relevant industry certifications, including CompTIA Security+ or an endpoint security or endpoint detection and response (EDR) vendor certification.
Compliance Experience — Preferred: Experience working in regulated or audited environments, including those subject to SOX, HIPAA, or PCI requirements.
Work Authorization: Authorization to work in the United States for any employer.
Collaborative and Mission-Driven Mindset: Ability to work effectively across teams, welcome constructive feedback, consider diverse perspectives, and contribute to continuous improvement and organizational success.
Benefits
Competitive Annual Salary: Expected salary range of $116,000–$125,000, depending on location, relevant experience, qualifications, and market considerations.
Remote Work Flexibility: Fully remote work across the United States, with a hybrid option available to employees living near designated offices. Hybrid employees generally work on-site Tuesdays and Wednesdays.
Full-Time Employment: A full-time opportunity within an enterprise security engineering environment.
Annual Bonuses: Eligibility for annual bonus opportunities, subject to applicable compensation policies.
Merit-Based Compensation Growth: Opportunities for salary increases and promotions based on performance, contribution, and organizational policies.
Professional Development: Opportunities to build expertise in endpoint security, application control, cybersecurity engineering, automation, and enterprise security operations.
Mission-Driven Environment: The opportunity to contribute to an organization focused on expanding educational and career opportunities.
Collaborative Team Culture: Work alongside security professionals and cross-functional partners who value technical excellence, accountability, knowledge sharing, and continuous improvement.
Transparent Compensation Practices: Compensation discussions grounded in qualifications, experience, market data, and geographic considerations.
Work-Life Flexibility: A remote-first work environment designed to support flexibility while maintaining effective collaboration. Occasional business travel may be required.