Endpoint Security Analyst

TITLE: Endpoint Security Analyst
LOCATION: 100% Remote
ANTICIPATED DURATION: End of 2026

Responsibilities:

• Review vulnerability reports, dashboards, and exposure data generated through cybersecurity tools like CrowdStrike Falcon.
• Analyze open vulnerabilities affecting enterprise Windows, Linux, and MacOS workstations and servers.
• Validate vulnerability findings to determine affected systems, software versions, available patches, and configuration changes.
• Prioritize remediation based on CVSS severity, active exploitation, exposure, asset criticality, and organizational impact.
• Take direct ownership of vulnerabilities from identification through remediation.
• Deploy and coordinate security patches for various operating systems and applications.
• Use enterprise management tools to deploy and automate remediation activities.
• Troubleshoot failed patches and unsuccessful remediation attempts.
• Develop remediation solutions for vulnerabilities where traditional patching is not available.
• Monitor vulnerability aging and ensure timely remediation within established OLAs.
• Proactively escalate vulnerabilities at risk of missing targets.
• Investigate unresolved vulnerabilities and determine root causes.
• Develop PowerShell scripts and automation to improve vulnerability remediation at scale.
• Automate repetitive activities such as software detection, patch deployment, and remediation verification.
• Support metrics tracking and reporting, including vulnerability counts, backlogs, and remediation success rates.
• Maintain documentation of remediation procedures, root causes, and resolutions.

Requirements:

• 3–5 years of experience in cybersecurity, vulnerability management, endpoint management, Windows administration, systems administration, or related IT disciplines.
• Hands-on experience remediating vulnerabilities in enterprise environments.
• Experience working with vulnerability management or endpoint security platforms such as CrowdStrike Falcon.
• Strong knowledge of Windows 10/11 and Windows Server environments.
• Experience with Microsoft Intune or comparable endpoint management platforms.
• Experience deploying OS and third-party application patches.
• Working knowledge of Microsoft Entra ID and enterprise endpoint management.
• Intermediate PowerShell scripting skills.
• Understanding of CVE, CVSS, vulnerability severity, patch management, endpoint security, and related concepts.
• Strong troubleshooting and root-cause analysis skills.
• Ability to manage multiple remediation efforts while meeting OLAs.

Preferred Experience:

• Experience with CrowdStrike Falcon Exposure Management / Spotlight.
• Experience with Microsoft Intune Remediations.
• Automating software deployment and vulnerability remediation.
• Experience with enterprise server patching processes.
• Familiarity with frameworks such as NIST, CIS Controls, and CISA KEV.
• Experience within an ITIL-based ITSM environment.
• Integrating vulnerability remediation with ITSM platforms.
• Security certifications such as Security+, CySA+, SSCP, GSEC, or equivalent are preferred but not required.