Endpoint Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Endpoint Security Engineer based in the United States. This role offers the opportunity to strengthen cybersecurity defenses for critical government systems by protecting endpoint environments and improving security resilience. The Endpoint Security Engineer will design, maintain, and enhance endpoint protection capabilities while supporting vulnerability management and compliance initiatives. Working within a mission-driven security environment, this position combines technical expertise, risk management, and regulatory knowledge to safeguard sensitive systems. The role requires close collaboration with security teams, technical stakeholders, and leadership to identify vulnerabilities and drive effective remediation strategies. You will contribute to cybersecurity programs aligned with federal standards such as NIST, FISMA, FedRAMP, and CISA requirements. This is an ideal opportunity for a cybersecurity professional who enjoys solving complex security challenges and making a measurable impact. \n Accountabilities: The Endpoint Security Engineer will be responsible for engineering secure endpoint environments, managing vulnerability reporting processes, and supporting cybersecurity compliance activities. This role requires strong technical execution, documentation skills, and the ability to communicate security risks and remediation plans to both technical and executive audiences. Engineer, maintain, and enhance secure endpoint systems to support organizational cybersecurity objectives. Perform vulnerability assessments, analyze CVE and Known Exploited Vulnerability (KEV) findings, and support remediation tracking activities. Monitor security vulnerabilities and provide risk assessments aligned with CISA directives and federal cybersecurity requirements. Prepare and deliver vulnerability reports, compliance documentation, and security findings for leadership review. Support endpoint security operations, including system hardening, patch management, and security configuration improvements. Integrate endpoint security solutions with SIEM platforms to enable continuous monitoring and threat detection. Assist with Certification & Accreditation (C&A) activities, including security documentation, audit responses, and remediation efforts. Develop and maintain technical documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and penetration testing reports. Support compliance initiatives related to NIST frameworks, FISMA, FedRAMP, and other federal cybersecurity standards. Protect sensitive information, including Personally Identifiable Information (PII), through appropriate security controls and practices. Collaborate with cybersecurity teams and stakeholders to identify security improvements and communicate remediation strategies. Provide technical expertise and recommendations to strengthen endpoint security posture. Requirements: The ideal candidate is an experienced cybersecurity engineer with expertise in endpoint protection, vulnerability management, and federal compliance frameworks. They should have strong analytical abilities, excellent documentation skills, and experience supporting security programs in regulated environments. Bachelor’s degree in Information Systems, Computer Science, Engineering, Cybersecurity, or a related field, or equivalent professional experience. 5+ years of experience in cybersecurity engineering, endpoint security, vulnerability management, or related security roles. Hands-on experience with vulnerability assessment processes, CVE/KEV analysis, remediation tracking, and security reporting. Strong knowledge of federal cybersecurity standards, including NIST SP 800 series, FISMA, FedRAMP, FIPS 140-2, and CISA Binding Operational Directives. Experience with endpoint engineering, system hardening, patch management, and SIEM integrations. Ability to create clear technical documentation and communicate security findings to technical and executive audiences. Experience supporting security compliance documentation, audits, and accreditation processes. Familiarity with Zero Trust Architecture and endpoint detection technologies is preferred. Security certifications such as Security+, CISSP, CISM, or CEH are preferred. Prior experience supporting federal agencies such as HHS, DHS, DoD, or similar environments is a plus. Must be a U.S. Citizen and able to obtain a Public Trust clearance. Strong problem-solving skills, attention to detail, and ability to work independently in a remote environment. Benefits: Competitive annual salary of up to $120,000 based on experience and qualifications. Fully remote work environment with flexible working options. Health, dental, and vision insurance coverage. Life insurance and disability benefits. 401(k) retirement plan with company matching. Health Savings Account (HSA) and Flexible Spending Account (FSA) options. Pet insurance benefits. Wellness program initiatives and employee support resources. Flexible workplace benefits designed to support work-life balance. Opportunity to contribute to meaningful cybersecurity initiatives supporting critical public-sector programs. \n How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1