Security Engineer - Endpoint

Responsibilities

• Define, implement, and maintain endpoint hardening baselines for Windows, macOS, and Linux systems using MDM tools like Microsoft Intune and JAMF.
• Develop and enforce security policies, standards, and procedures for all endpoint devices.
• Implement and maintain endpoint security solutions, including EDR, XDR, antivirus, and host-based firewalls.
• Collaborate with IT and Security teams to triage, remediate, and contain endpoint-related security incidents.
• Manage the endpoint vulnerability lifecycle, including discovery, assessment, and patch management for operating systems and applications.
• Develop scripts and automation using Python or PowerShell to streamline security operations and repetitive tasks.
• Secure endpoints used for AI development, implementing guardrails and data loss prevention (DLP) for sensitive datasets (PHI/PII).
• Participate in an on-call rotation to support security operations.

Requirements

• 3-5 years of hands-on experience in endpoint security, cybersecurity engineering, or a similar role.
• Deep understanding of Windows and macOS architecture, configuration, and deployment in enterprise environments.
• Strong hands-on experience with Microsoft Intune and JAMF administration.
• Proficiency with Azure Cloud PC, Virtual Machines, Azure Firewall, and Azure Networking.
• Proven experience with EPM platforms such as CyberArk or BeyondTrust.
• Solid understanding of networking concepts (TCP/IP, Routing/Switching, WAN, Wi-Fi) and network security.
• Knowledge of cybersecurity frameworks including NIST and MITRE.
• Experience working within compliance frameworks such as SOC 2, HITRUST, or ISO.
• Scripting skills in Python or PowerShell.

About the Company

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care.