Desktop Security Engineer

An established and growing enterprise organization is seeking an experienced and dedicated Desktop Security Engineer to join our team and take charge of ensuring the security and integrity of our systems. The ideal candidate will have a strong background in vulnerability management, with the ability to conduct investigations, prioritize patches, and guide both junior team members and management on vulnerability-related matters. Excellent time management and communication skills are required.

Responsibilities:

• Conduct thorough investigations into vulnerabilities across hundreds of machines, thousands of patches, and various operating systems including Windows, MacOS, and virtual servers.
• Utilize Microsoft tools such as InTune and SCCM for deploying packages, as well as Tanium as the main vulnerability platform for patching, scanning, and monitoring.
• Keep abreast of industry developments and vendor alerts to proactively identify and address potential vulnerabilities.
• Collaborate with the security team to review and prioritize vulnerability data, guiding efforts on where to concentrate resources both in the short term and long term.
• Assist in minor vendor interactions and work closely with end users to remotely assess machines for vulnerabilities.
• Maintain a consistent patching schedule while remaining flexible to address out-of-scope vulnerabilities.

Requirements:

• Proven experience as a dedicated vulnerability and desktop support engineer professional, not just exposure through service desk roles.
• Proficiency in Microsoft tools, particularly InTune and SCCM, for package deployment.
• Familiarity with Tanium or similar vulnerability and desktop security platforms for patching, scanning, and monitoring desired.
• Strong understanding of desktops, laptops, virtual servers, and MacOS systems.
• Excellent investigative skills with a logical and problem-solving mindset.
• Ability to digest complex data and prioritize actions effectively.
• Keen awareness of industry trends and vendor alerts, serving as an extension of the security team.
• Experience with Sentinel One and Qualys desired but not required.
• Familiarity with hardware components relevant to vulnerability management.
• Previous experience guiding junior team members and providing guidance to management on vulnerability-related matters.