Associate Consultant - Security Engineering

Security Engineering - Associate Consultant - MFT KGS CH

This role is responsible for maintaining and enhancing the security posture of our IT environment by managing endpoint security and patch management solutions. The Senior Associate will ensure that all servers and desktops are patched, compliant with security guidelines, and protected from threats. This position is key to reducing vulnerability exposure and ensuring the stability and security of our systems.

 

 

• Administer and maintain endpoint security and patching platforms, including Microsoft Intune and Defender.

• Deploy, manage, and troubleshoot endpoint protection solutions (e.g., Microsoft Defender, CrowdStrike) across servers, workstations, VDI, Macs, and mobile devices.

• Administer core Microsoft security technologies, including Entra, Intune, and the Microsoft Defender Security Center.

• Deploy and validate patches for servers and workstations in accordance with Service Level Agreements (SLAs).

• Troubleshoot and resolve failures of security agents and tooling in coordination with infrastructure teams.

• Develop scripts and automation (PowerShell, PowerCLI, etc.) to improve deployment efficiency, reporting, and compliance.

• Generate and present compliance metrics, executive reports, and operational dashboards.

• Participate in a 24x7 on-call rotation and respond to security incidents as required.

Qualifications and Skills

General Skills: Strong verbal and written communication, problem-solving, and analytical skills. Possesses independent judgment and a customer-service mindset. Ability to positively influence and mentor team members.

Endpoint Security:

• Proficiency with Microsoft Defender suite, including the Intune and M365 Defender consoles.

• Understanding of Entra Active Directory and co-management concepts.

• Understanding of new and emerging technologies as they relate to endpoint security

Patch Management:

• Expertise in modern patching platforms and technologies (e.g., SCCM, WSUS, Ansible, BigFix).

Technical Skills:

• Operating Systems: Windows 11, Windows Server (2016 to current), macOS, and Linux (Red Hat).

• Scripting: Strong knowledge of PowerShell, PowerCLI, Splunk, KQL, and Linux shell scripting.

• Other Technologies: Familiarity with databases (Oracle, MS SQL), web technologies, enterprise storage, and server virtualization. Ability to use AI effectively to assist with troubleshooting, scripting, and overall environment understanding and compliance.

Reporting: Experience using metrics to manage SLAs and create operational reports.

Education: Bachelor's Degree or equivalent work experience.

Experience: 3-5 years of experience administering enterprise endpoint security and patch management solutions to maintain secure and compliant environments.

Experience Level

Mid Level