Endpoint Vulnerability Desktop Engineer

Job Title: Endpoint Desktop Vulnerability Engineer
Location: Greater Phoenix Area (Onsite)
Duration: Long-Term Contract (12 Months)

Overview
An enterprise organization within the financial services sector is hiring an Endpoint Desktop Vulnerability Engineer to support a large-scale, security-driven environment. This role is embedded within a mature cybersecurity program and focuses on proactively identifying and eliminating risk across thousands of Windows-based endpoints.

You’ll operate at the intersection of endpoint engineering and security—owning vulnerability remediation efforts, improving patching effectiveness, and helping drive measurable reductions in enterprise risk exposure.

What You’ll Be Doing

• Conduct enterprise-wide vulnerability assessments across Windows desktop environments
• Evaluate and validate scan data, filtering noise and focusing on real, exploitable risk
• Drive remediation efforts by deploying patches, system updates, and configuration changes
• Partner with security, infrastructure, and endpoint teams to align remediation priorities
• Track vulnerabilities from discovery through closure, ensuring SLA adherence
• Investigate failed patch deployments and non-compliant systems, implementing corrective actions
• Enhance endpoint hardening standards and baseline configurations
• Develop repeatable processes to improve vulnerability response time and consistency
• Provide clear reporting on remediation status, trends, and risk reduction efforts

What You Bring

• Experience in endpoint engineering, desktop infrastructure, or vulnerability remediation within enterprise environments
• Hands-on background managing vulnerabilities across Windows systems at scale
• Strong understanding of vulnerability lifecycle management and risk prioritization
• Experience with endpoint management and patching platforms (MECM/SCCM, Intune, or similar)
• Solid grasp of Windows OS internals, group policy, and endpoint security configurations
• Ability to interpret vulnerability data and translate it into actionable remediation strategies
• Strong troubleshooting skills around patching failures, compliance gaps, and endpoint inconsistencies
• Ability to work cross-functionally with both security and infrastructure teams

Nice to Have

• Experience with tools such as Tenable, Qualys, or Rapid7
• PowerShell or similar scripting for automation and remediation
• Familiarity with CIS benchmarks, NIST, or similar frameworks
• Background in regulated environments (banking, finance, healthcare, etc.)
• Exposure to EDR/endpoint protection platforms

Education & Certifications

• Degree in IT, Cybersecurity, Computer Science, or equivalent hands-on experience
• Microsoft endpoint certifications preferred
• Security certifications (Security , CySA , etc.) are a plus

Why This Role

• Long-term contract stability (12 months)
• Direct ownership of high-visibility security initiatives
• Work within a structured, enterprise-level vulnerability management program
• Immediate impact on reducing risk across a large, complex environment