Vulnerability Management Engineer / Intune / Hybrid in Scottsdale

About the role

A large enterprise technology organization is seeking a Senior Endpoint Vulnerability Remediation Engineer for an engagement based in the Scottsdale, AZ area (hybrid).

Responsibilities

• Reduce a significant backlog of endpoint vulnerabilities across the enterprise.
• Analyze why issues persist and take ownership of driving them to resolution.
• Work across unknown stakeholders, troubleshoot deeply rooted issues, and help establish better processes.
• Interpret vulnerability scan data and take action on remediation.
• Collaborate with teams and stakeholders to coordinate remediation efforts.
• Ensure compliance with CIS benchmarks or endpoint hardening practices.
• Build reporting dashboards using tools like Splunk or Power BI.

Requirements

• 5+ years of experience in endpoint management, vulnerability remediation, or security engineering.
• Strong hands-on experience with Windows operating systems (primary focus) and working knowledge of MacOS.
• Proficiency with PowerShell scripting and/or Bash for Mac environments.
• Experience with endpoint management platforms such as Intune and/or Jamf.
• Background in patch management tools such as SCCM, MECM, WSUS, or Patch My PC.
• Ability to interpret vulnerability scan data and take action on remediation.
• Strong understanding of file systems, software installations, and endpoint configurations.
• Experience working in MDM environments and troubleshooting patch failures.
• Ability to coordinate with stakeholders and drive remediation efforts forward.
• Solid understanding of networking fundamentals related to endpoint vulnerabilities.
• Experience with vulnerability and EDR tools such as Rapid7 or Defender for Endpoint.
• Familiarity with ServiceNow or similar ticketing systems.
• Experience repackaging applications or working with legacy software vulnerabilities.
• Exposure to MacOS tools such as Nudge or Installomator.
• Knowledge of CIS benchmarks or endpoint hardening practices.
• Experience building reporting dashboards using tools like Splunk or Power BI.
• Security certifications such as Security+, CEH, or CISSP.

Qualifications

• 90% Windows Endpoint Environment
• 10% MacOS Environment
• 80% Hands-On Troubleshooting and Remediation
• 5% Oversight and Escalation Handling
• 15% Collaboration with Teams and Stakeholders

Skills

• Proficiency with PowerShell scripting and/or Bash for Mac environments.
• Experience with endpoint management platforms such as Intune and/or Jamf.
• Experience with patch management tools such as SCCM, MECM, WSUS, or Patch My PC.
• Ability to interpret vulnerability scan data and take action on remediation.
• Strong understanding of file systems, software installations, and endpoint configurations.
• Experience working in MDM environments and troubleshooting patch failures.
• Ability to coordinate with stakeholders and drive remediation efforts forward.
• Solid understanding of networking fundamentals related to endpoint vulnerabilities.
• Experience with vulnerability and EDR tools such as Rapid7 or Defender for Endpoint.
• Familiarity with ServiceNow or similar ticketing systems.
• Experience repackaging applications or working with legacy software vulnerabilities.
• Exposure to MacOS tools such as Nudge or Installomator.
• Knowledge of CIS benchmarks or endpoint hardening practices.
• Experience building reporting dashboards using tools like Splunk or Power BI.
• Security certifications such as Security+, CEH, or CISSP.

Benefits

• Medical Insurance
• Dental & Orthodontia Benefits
• Vision Benefits
• Health Savings Account (HSA)
• Health and Dependent Care Flexible Spending Accounts
• Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
• Hospital Indemnity Insurance
• 401(k) including match with pre and post-tax options
• Paid Sick Time Leave
• Legal and Identity Protection Plans
• Pre-tax Commuter Benefit
• 529 College Saver Plan