> Markdown version of [/jobs/ext/2118755-endpoint-security-engineer-endpoint-identity-security-engineer](https://www.wearedevelopers.com/jobs/ext/2118755-endpoint-security-engineer-endpoint-identity-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Endpoint Security Engineer / Endpoint & Identity Security Engineer

- **Company:** REDLEO SOFTWARE INC.
- **Location:** New York, NY, United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Cyber Security, Linux, Linux System Administration, Windows Servers, Windows PowerShell, Software Vulnerability Management, Symantec, SentinelOne Expertise, Qualys
- **Published:** August 19, 2026
- **Apply:** https://www.dice.com/job-detail/0c22d1aa-4117-458e-99b2-9c20c0bee024

## About the Role

Must have: Hardening, AD security, endpoint protection, vulnerability remediation, and automation, * Windows Server & Active Directory Administration

 * CIS Benchmark Hardening (Windows, Linux, endpoints)
 * Group Policy (GPO) Security & Governance
 * Endpoint Security Platforms: Microsoft Defender, CrowdStrike, SentinelOne, Trellix, Symantec
 * Core Security Controls: PAM, MFA, Encryption, Application listing, Device Control
 * Vulnerability Management Tools: Tenable, Qualys, or Rapid7
 * Security Frameworks: CIS, NIST, ISO 27001
 * PowerShell Automation, 4. SC-200 (Security Operations Analyst)
 5. CrowdStrike CCFA or Sentinel One SIREN
 6. Qualys / Tenable / Rapid7 VM Certification

## Description

We need someone who can strengthen enterprise security by implementing hardening standards, securing Active Directory, and managing endpoint protection across Windows and Linux environments. Maintain CIS-aligned baselines, enforce GPO-driven security controls, and support vulnerability remediation using industry-leading tools. Ensure endpoints, servers, and identities remain compliant, resilient, and securely configured.

Key Focus Areas:

 * CIS Benchmark hardening (Windows/Linux)
 * Active Directory & GPO security governance
 * Endpoint protection (Defender, CrowdStrike, SentinelOne, Trellix)
 * Vulnerability management (Tenable/Qualys/Rapid7)
 * PAM, MFA, encryption, listing & device control
 * PowerShell automation for security configuration


## Related Videos

- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)