> Markdown version of [/jobs/ext/1353371-endpoint-security-analyst](https://www.wearedevelopers.com/jobs/ext/1353371-endpoint-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Endpoint Security Analyst

- **Company:** Lehigh Carbon Community College
- **Location:** Schnecksville, PA, United States
- **Experience:** Experienced
- **Salary:** $51,520.0 - $73,872.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Android Software Development, Antivirus Softwares, Apple IOS, Apple Mac Systems, Bash Shell, CompTIA Security+, Cyber Security, Firmware, Python (Programming Language), System Center Configuration Manager, Windows PowerShell, Phishing, Telnet, Scripting, File Transfer Protocol (FTP), System Availability, Information Technology, Patch Management, Casper Suite, CIS Benchmarks, Security Orchestration, Automation & Response, Unified Endpoint Management, Vulnerability Analysis
- **Published:** July 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=1afec31abf0623e8

## About the Role

* High school diploma/or equivalent

and

 * ComptIA Security+, CySA+ or related cybersecurity certification. If not in possession, must acquire within first 6 months of employment.

Certifications

 * Act 153 Clearances (Act 34 PA Criminal Background, Act 151 PA Child Abuse History, Act 114 FBI Clearance Fingerprinting)

Work Experience

 * 3-5 years of experience in IT support or systems administration with a heavy focus on endpoint security and device management.

Knowledge, Skills, Abilities

 * In-depth knowledge of Windows, macOS, iOS, and Android security
 * Experience with Unified Endpoint Management (UEM) and Mobile Device Management (MDM)
 * Proficiency in scripting for automation (e.g., PowerShell or Python) to manage large-scale device
 * Knowledge of common attack vectors targeting end-users, such as phishing, credential theft, and drive-by
 * Ability to communicate complex technical security concepts to non-technical faculty, staff, and
 * Demonstrated ability to create clear, concise, and comprehensive technical documentation for both technical and non-technical audiences.
 * Strong written communication skills with the ability to develop and maintain accurate technical documentation for diverse audiences., * Bachelor's degree in Cybersecurity, Information Technology, or a related field from an accredited institution.
 * Experience in a Higher Education environment, particularly within a community college setting.
 * Current certifications such as CompTIA Security+, CySA+, or vendor-specific certifications (e.g., Microsoft 365 Certified: Endpoint Administrator Associate).

## Description

(The standard work week is Monday through Friday, 8:00 AM to 5:00 PM. Exempt professionals, are expected to maintain a flexible schedule to ensure all responsibilities and collegiate needs are met, including occasional work outside of core business hours.), The Endpoint Security Analyst is responsible for the security, integrity, and operational health of the institution's end-user computing environment. This includes the engineering and management of security controls for workstations (PC/Mac), mobile devices, and networked peripherals such as printers. The position works closely with the IT Support team to uphold academic productivity while maintaining a robust defense against evolving threats., * Endpoint Protection Management: Administer and optimize Endpoint Detection and Response (EDR) and Next-Generation Antivirus (NGAV) solutions across all college-owned end-user

 * Device Lifecycle Security: Implement and maintain secure configuration baselines (e.g., CIS Benchmarks) for workstations and mobile devices using unified endpoint management (UEM) tools like Jamf, SCCM, and
 * Workstation Management: Maintain standardized configurations for classroom and administrative workstations to ensure a consistent experience and prevent unauthorized persistent changes to software and
 * Vulnerability & Patch Management: Identify, prioritize, and automate the remediation of vulnerabilities on end-user hardware, including third-party application patching and firmware updates for networked printers, end-user workstations (Mac/PC), mobile devices, and other end user
 * Secure Process Best Practices: Implement and advocate for secure workflows, such as Follow-Me or authenticated release printing, to prevent sensitive information exposure, reduce waste, and create
 * General Print Administration & Support: Provide high-level support for the college's networked printing environment, ensuring high availability of services while managing driver deployment and printer configuration via centralized management
 * Print Infrastructure Security: Secure the printing environment by hardening device firmware, disabling insecure protocols (e.g., Telnet, FTP), and ensuring all print traffic is encrypted across the campus
 * Incident Triage: Serve as the primary security escalation point for the IT Support desk, investigating alerts from endpoint sensors and performing initial forensic analysis of potentially compromised
 * Security Automation: Develop scripts (PowerShell, Bash, or Python) to automate routine security audits and the deployment of security agents across the
 * Compliance & Reporting: Monitor and report on endpoint compliance with federal and state regulations (e.g., FERPA, GLBA) and institutional security
 * Maintains and updates an operational manual.
 * Performs other duties/special projects as, The noise level in the work environment is usually quiet to moderate. This position will be required to work evening and weekend hours as needed.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine)
- [Chat App Leak, Tesla’s Blurry Dashcam, and Meta Currency Beats Bitcoin - Keith Cirkel](https://www.wearedevelopers.com/videos/1857-chat-app-leak-tesla-s-blurry-dashcam-and-meta-currency-beats-bitcoin-keith-cirkel)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)