About Foundever: We are Foundever. Our 150,000 people across the globe connect many of the world’s best-known brands with their customers – 9 million times every day. As a global leader in customer experience (CX) management, we deliver experiences through voice, chat, social media and for 400+ clients, from Fortune 500 companies to startups. We value creativity, collaboration, and a commitment to excellence. Join our team and be part of a culture that fosters growth and advancement.
Job Summary
We are seeking a detail-oriented and technically skilled Endpoint Vulnerability Engineer to support enterprise vulnerability remediation and endpoint security operations. This role is responsible for identifying, prioritizing, and remediating endpoint vulnerabilities using tools such as Tenable , SCCM (System Center Configuration Manager), Group Policy and Intune .
The ideal candidate will have hands-on experience with patch management, vulnerability remediation workflows, compliance monitoring, and endpoint hardening across Windows environments. This position plays a critical role in maintaining our organization’s endpoint security posture and ensuring client compliance with regulatory and security frameworks.
Key Responsibilities
Vulnerability Remediation & Patch Management
Review and analyze vulnerability scan results from Tenable.
Validate vulnerabilities and eliminate false positives through investigation and testing.
Prioritize remediation efforts based on severity, exploitability, and business impact.
Deploy patches, configuration changes, and software updates using SCCM and other endpoint management tools.
Perform operating system and third-party application patching across enterprise environments.
Troubleshoot patch deployment failures and remediation issues.
Document remediation activities and maintain accurate records for audit and compliance purposes.
Compliance Monitoring & Reporting
Monitor endpoint compliance against internal security baselines and client contractual standards.
Track remediation SLAs and ensure vulnerabilities are addressed within defined timelines.
Generate vulnerability and compliance reports for internal stakeholders and clients.
Support audit requests by providing remediation evidence and system documentation, and when necessary present proofs to internal and client stakeholders.
Escalate high-risk vulnerabilities or systemic issues to the Endpoint Vulnerability Manager.
Endpoint Security Operations
Assist in maintaining endpoint security baselines and configuration standards.
Identify trends in vulnerability data and recommend proactive improvements.
Support hardening initiatives across Windows and macOS platforms.
Validate that newly deployed systems meet security and compliance requirements.
Assist with automation of remediation tasks using PowerShell or scripting tools.
Tool Administration & Optimization
Support day-to-day operation of Tenable scanning and reporting activities.
Assist in maintaining SCCM collections, deployment packages, and patch baselines.
Optimize patch deployment workflows to improve remediation timelines and success rates.
Participate in testing and validation of new patching processes or tool enhancements.
Collaboration & Communication
Work closely with infrastructure teams, Service Delivery, and Operations teams to coordinate remediation activities.
Provide technical guidance to desktop engineering and support teams regarding vulnerability remediation.
Clearly communicate remediation status, blockers, and risk exposure to leadership when required.
Contribute to process documentation and standard operating procedures.
Education & Experience
5+ years of experience in endpoint management, vulnerability remediation, and
patch management.
Experience working in enterprise environments with structured compliance requirements.
Technical Skills
Hands-on experience with Tenable (or similar vulnerability management tools such as Qualys or Rapid7).
Strong experience with SCCM for patch deployment, software updates, and endpoint configuration management.
Knowledge of Windows operating systems.
Experience with PowerShell scripting for task automation and remediation support.
Understanding of vulnerability scoring (CVSS), exploitability, and risk-based prioritization.
Familiarity with CIS Benchmarks, NIST frameworks, or other compliance standards.
... Windows 11 Administration - Windows Server 2016/2019/2022 - Basic macOS Endpoint Administration Scripting & Automation - PowerShell Scripting - Batch Scripting - Endpoint Automation Preferred Skills - Microsoft Intune / Microsoft Endpoint Manager - End point Central or similar vulnerability management tools - Active Directory ...
... Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff or Senior Staff Engineer, Vulnerability & Exposure Management to join our team. This is a hybrid role, reporting to the Senior Manager, Information Security Engineering in the Product ...
... - Support vulnerability remediation and endpoint hardening initiatives - Collaborate and Support internal regional and local infrastructure teams - Monitor endpoint health, performance, and availability - Troubleshoot and resolve complex endpoint deployments and configurations - Participate in on-call support rotations ...
... who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking a Systems Engineering Advisor - Endpoint Management-Patch/Deployment/SCCM Analyst to join our team in Noida, Uttar Pradesh (IN-UP), India (IN). ROLE OVERVIEW We are seeking an ...
... policies. - Hands-on experience investigating endpoint threats using EDR platforms such as Sophos or Microsoft Defender for Endpoint. - Experience performing vulnerability management using Tenable or Qualys, including vulnerability analysis, prioritization, and remediation tracking for Windows, Linux, and endpoint systems. ...
... implementing cloud security controls, and ensuring complete isolation of recovery traffic from production and enterprise https://jobeax.com/link/tHIqorVnn7E6RAlq engineer will also be responsible for integrating security telemetry with the SIEM platform and validating endpoint protection and cloud security posture across recovered ...
... Technology, Computer Science, Engineering, or a related field, or equivalent practical experience. - 3-5 years of experience in software development, automation engineering, AI/ML Engineering, agentic systems development, reliability engineering, platform engineering, endpoint engineering, or related technical roles. - Demonstrated ...
... systems - Strong vulnerability management lifecycle experience — from scan to remediation to compliance attestation (exclusionary). - Deep experience with vulnerability scanning tooling — Qualys, Tenable Nessus, Rapid7, Microsoft Defender for Endpoint or equivalent (exclusionary). - Experience leading patching governance ...
... capabilities, including SAST, DAST, and Software Composition Analysis (SCA).- Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.- Perform manual and automated application vulnerability ...
... Ubuntu, CentOS, or similar).- Good knowledge of Shell/Bash scripting.- Experience with enterprise firewalls, VPNs, routing, and switching.- Understanding of endpoint security, access control, data protection, and security hardening.- Knowledge of security monitoring, incident response, and vulnerability management.- Excellent ...