RemoteLeaf Logo
Log in Sign up

Staff Endpoint Security Engineer

1 month, 2 weeks ago
India
Full-time
Lead
Security Engineer
DevOps and Infrastructure
Android Ansible Bash Chef Elasticsearch HIPAA iOS Linux macOS OAuth Puppet Python SAML SIEM SOC Splunk Swift
Apply Now
ChargePoint

ChargePoint

ChargePoint is the world's largest network of electric vehicle charging stations, providing premium EV charging solutions and leading the way in electric mobility since 2007.

Electric Utilities
1K-5K
Founded 2007
View All Jobs 3

Description

  • Define, implement, and enforce endpoint security baselines and hardening standards across Windows, macOS, and Linux systems.
  • Deploy, manage, and tune endpoint detection and response, antivirus, anti-malware, firewall, allowlisting/blocklisting, and data loss prevention controls.
  • Conduct endpoint vulnerability assessments and coordinate timely remediation with IT and asset owners.
  • Architect, deploy, and manage enterprise mobile device management solutions across the organization’s device fleet.
  • Design and enforce device enrollment, compliance, configuration, conditional access, application lifecycle, and certificate management workflows.
  • Manage and harden Windows endpoints using Group Policy, MECM/SCCM, Intune, Defender, patching, logging, and telemetry controls.
  • Manage macOS endpoint security using Jamf Pro, Apple business management workflows, security controls, scripting, and patch management.
  • Harden Linux endpoints, manage Linux security policies and patching, and monitor endpoint security events through EDR and SIEM integrations.
  • Triage endpoint security alerts and incidents, perform forensic analysis, and develop detection rules, threat hunting queries, and playbooks.
  • Mentor other engineers and IT staff, evaluate new tools, manage vendors, and support secure joiner/mover/leaver processes.

Requirements

  • 7–9 years of hands-on experience in endpoint security, systems administration, or a closely related field.
  • Expert-level knowledge of Windows endpoint security, including Group Policy, Intune, SCCM/MECM, Defender for Endpoint, and Windows hardening.
  • Expert-level knowledge of macOS endpoint security, including Jamf Pro, Apple Business Manager, configuration profiles, and macOS security controls.
  • Solid Linux endpoint security experience, including hardening, SELinux/AppArmor, auditd, and Linux-based EDR/HIDS solutions.
  • Deep experience with enterprise MDM platforms such as Jamf Pro, Microsoft Intune, Workspace ONE, or equivalent in a large-scale environment.
  • Hands-on experience with EDR/EPP platforms such as CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint.
  • Strong scripting skills for automation and endpoint management, including Bash, PowerShell, Python, and/or Swift.
  • Solid understanding of PKI, certificate management, and secure authentication methods such as SAML, OAuth, SCIM, and conditional access.
  • Familiarity with SIEM platforms and endpoint telemetry integration such as Splunk, Microsoft Sentinel, or Elastic.
  • Strong knowledge of endpoint security frameworks including CIS Benchmarks, NIST SP 800-70, and DISA STIGs.
  • Experience with Zero Trust Network Access and MDM compliance integration with identity providers is preferred.
  • Familiarity with privileged access management tools is preferred.
  • Exposure to mobile security within an MDM context is preferred.
  • Experience with vulnerability management platforms is preferred.
  • Knowledge of macOS and Linux forensic tooling is preferred.
  • Relevant certifications such as CISSP, CISM, Security+, CEH, Microsoft SC-300/MD-102, Jamf certifications, or CrowdStrike certifications are preferred.
  • Experience in regulated industries such as FinTech, Healthcare, Legal, or Enterprise SaaS is preferred.

Benefits

  • Remote work option in Gurgaon/remote location.
  • Equal opportunity employer committed to an inclusive and diverse workplace.
  • Reasonable accommodations available throughout the employment process and for job-related needs.
  • Opportunity to work on a large-scale EV charging platform and help shape a growing industry.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Raiffeisen Bank Ukraine

RASP Cyber Force | Професійна програма для ветеранів у сфері кібербезпеки

Raiffeisen Bank Ukraine 10K-50K Banks

Raiffeisen Bank’s RASP Cyber Force is a six-month cybersecurity development program for veterans and service members, combining training and part-time work in one of the bank’s information security teams.

Ukraine Part-time Entry Level Security Analyst Security Engineer
Cybersecurity Encryption Network Security Penetration Testing SOC
17 hours, 31 minutes ago
Lever

Senior Cryptocurrency Engineer

Lever 251-1K Professional Services

AnaVation is hiring a Senior Cryptocurrency Engineer to lead blockchain analysis and digital-asset investigations supporting federal cyber-enabled financial-crime and cryptocurrency cases.

United States Full-time Senior Blockchain Developer Security Engineer
Bitcoin Cybersecurity
17 hours, 46 minutes ago
Worth AI

Security Engineer

Worth AI Internet Software & Services

Worth AI is seeking a hands-on Security Engineer to strengthen vulnerability management, harden AWS environments, and embed application security into software delivery.

United States Full-time Junior Security Engineer
AWS Bash CI/CD JIRA Linear Python
18 hours, 1 minute ago
qodea

Head of IT and Internal Security

qodea

Beyond is hiring a Head of IT & Internal Security to define and deliver its global internal technology and security strategy across a complex international organization.

Romania Full-time Lead Infrastructure Engineer Security Engineer
GCP
18 hours, 1 minute ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers