Endpoint Security & Exposure Engineer

About Jacobs

Jacobs is committed to solving the world's most critical challenges by transforming innovative ideas into impactful solutions across thriving cities, resilient environments, operational advancement, scientific discovery, and cutting-edge manufacturing.

Role Overview

We are seeking an Endpoint Security & Exposure Management Engineer to join our Cyber Security team. This role is crucial for mitigating cyber risks by driving vulnerability remediation, reinforcing endpoint security controls, and enhancing visibility of security exposure across a global IT landscape. You will work collaboratively with infrastructure, cloud, desktop engineering, and security teams to identify, prioritize, and address vulnerabilities while supporting key security functions including application control, privilege management, and endpoint hardening.

Key Responsibilities

• Lead enterprise-wide vulnerability and exposure management initiatives to ensure security risks are effectively identified, prioritized, and resolved.
• Collaborate closely with technology teams to advance remediation programs and diminish organizational cyber risk.
• Support and improve endpoint security mechanisms such as application control, allowlisting, privilege management, and endpoint hardening.
• Utilize data analysis, reporting, and dashboards to deliver visibility into cyber exposure, remediation progress, and security outcomes.
• Evaluate emerging vulnerabilities and threats to provide risk-based recommendations to stakeholders.
• Serve as a reliable security partner across infrastructure, cloud, application, and operations teams to embed security best practices and enhance resilience.

Qualifications & Experience

• Proven experience in cybersecurity, vulnerability management, security engineering, or endpoint security.
• Strong comprehension of risk-driven vulnerability management and remediation prioritization.
• Familiarity with vulnerability management tools such as Tenable, Qualys, or Rapid7.
• Experience with remediation workflow platforms like ServiceNow Vulnerability Response.
• Understanding of endpoint security technologies including application control, privilege management, and endpoint protection.
• Effective collaboration and excellent communication skills for engaging stakeholders.
• Ability to translate technical security risks into meaningful business impacts.

Desirable Skills & Experience

• Implementation experience of Zero Trust security principles.
• Familiarity with Microsoft Defender for Endpoint, Intune, Active Directory, and Entra ID.
• Exposure to cloud platforms such as Azure, AWS, or Google Cloud.
• Knowledge of cybersecurity frameworks like NIST, ISO 27001, CIS Controls, Cyber Essentials Plus, and NCSC CAF.
• Relevant industry certifications including CISSP, CISM, Security+, GIAC, Microsoft Security, or ServiceNow certifications.

Technical Expertise

• Endpoint Security: application control, allowlisting, privilege management, endpoint hardening, least-privilege administration, Zero Trust architecture.
• Vulnerability & Exposure Management: vulnerability assessment, exposure management, risk prioritization, attack surface management, patch management, security risk analysis.
• Platforms: Microsoft Windows Server, Windows 11, Linux, Active Directory, Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, cloud platforms (Azure, AWS, Google Cloud), ServiceNow Vulnerability Response.
• Scripting & Automation: PowerShell, Python, API integrations, workflow automation, security reporting, dashboard creation.

Preferred Qualifications & Certifications

• Experience with endpoint detection and response (EDR) platforms.
• Familiarity with security standards including NIST Cybersecurity Framework, CIS Controls, ISO 27001, NCSC Cyber Assessment Framework, Cyber Essentials Plus, Defence Cyber Certification (Levels 0-3), ACSC Essential Eight.
• Certifications: CISSP, GIAC Security certifications, CompTIA Security+, Certified Information Security Manager (CISM), ServiceNow Certified Implementation Specialist, Tenable Certified Professional, Qualys Certified Specialist, Microsoft Security certifications.

Key Competencies

• Strong analytical and problem-solving capabilities.
• Excellent stakeholder management and communication proficiency.
• Ability to interpret technical risks into business impacts.
• Effective organizational and prioritization skills.
• Collaborative mindset for driving remediation and reducing risks.
• Focus on continuous improvement and delivering measurable security results.

Success Metrics

• Reduction of privileged access risks.
• Expansion of endpoint security control coverage.
• Decrease in critical and high-risk vulnerabilities.
• Enhanced remediation performance and compliance with SLAs.
• Improved visibility of enterprise cyber exposure.
• Successful adoption of least-privilege principles across endpoints.
• Measurable reduction in attack surface and overall cyber risk.

Benefits & Culture

• Influence the management of cyber risk at a global scale.
• Ownership of vital vulnerability and exposure management capabilities.
• Exposure to cutting-edge security technologies across endpoint, cloud, and enterprise domains.
• Opportunity to impact Jacobs' security strategy and posture.
• Collaborate globally with skilled cybersecurity, infrastructure, cloud, and engineering professionals.
• Flexible work options including remote and hybrid models with no mandatory office presence.
• Join a team dedicated to innovation, continuous improvement, and excellence in security.
• Access to global expertise networks and inclusive culture emphasizing safety, integrity, and belonging.
• Comprehensive wellbeing resources addressing physical, emotional, and financial health.
• Inclusive hiring practices encouraging applications from Māori and Pasifika peoples, with cultural safety supports during recruitment.
• Supportive hybrid working policy balancing office and remote environments.

Cultural and Recruitment Support

Jacobs is committed to diversity, equity, and inclusion, fostering communities for connection and innovation. Applicants seeking accommodations or additional support during recruitment can request reasonable adjustments to ensure a positive experience.