Endpoint Security & Exposure Engineer in London

Overview

The Endpoint Security & Exposure Management Engineer at Jacobs is responsible for reducing cyber risk by driving vulnerability remediation, strengthening endpoint security controls, and improving visibility of security exposure across a global technology estate.

This role works closely with infrastructure, cloud, desktop, and security teams to identify, prioritise, and remediate vulnerabilities and to support key security capabilities including application control, privilege management, and endpoint hardening.

• Day to Day Responsibilities
• Lead vulnerability and exposure management activities across enterprise environments, ensuring security risks are identified, prioritised, and remediated effectively.
• Work closely with technology teams to drive remediation programmes and reduce organisational cyber risk.
• Support and enhance endpoint security capabilities, including application control, allowlisting, privilege management, and endpoint hardening.
• Use data, reporting, and dashboards to provide visibility of cyber exposure, remediation performance, and security outcomes.
• Assess emerging vulnerabilities and threats, providing risk-based recommendations and guidance to stakeholders.
• Act as a trusted security partner across infrastructure, cloud, application, and operational teams, helping embed secure practices and improve resilience.
• What You'll Bring (Qualifications)
• Experience in cybersecurity, vulnerability management, security engineering, or endpoint security.
• Strong understanding of risk‑based vulnerability management and remediation prioritisation.
• Hands‑on experience with vulnerability management platforms such as Tenable, Qualys, or Rapid7.
• Experience with Service Now Vulnerability Response or similar remediation workflow platforms.
• Knowledge of endpoint security technologies including application control, privilege management, and endpoint protection.
• A collaborative approach with strong stakeholder engagement and communication skills.
• The ability to translate technical security risks into meaningful business outcomes.

Desirable Experience

• Experience implementing Zero Trust principles.
• Exposure to Microsoft Defender for Endpoint, Intune, Active Directory, and Entra ID.
• Experience working within cloud environments such as Azure, AWS, or Google Cloud.
• Knowledge of frameworks such as NIST, ISO 27001, CIS Controls, Cyber Essentials Plus, and NCSC CAF.
• Industry certifications including CISSP, CISM, Security+, GIAC, Microsoft Security, or Service Now certifications.

Benefits

• Shape how cyber risk is managed across a global organisation.
• Take ownership of a critical vulnerability and exposure management capability.
• Work with leading security technologies across endpoint, cloud, and enterprise environments.
• Influence security strategy and drive measurable improvements to Jacobs’ security posture.
• Collaborate with talented cybersecurity, infrastructure, cloud, and engineering professionals worldwide.
• Enjoy genuine flexibility with remote and hybrid working options and no mandated office attendance requirements.
• Be part of a team committed to innovation, continuous improvement, and security excellence.
• A global network of expertise and opportunity.
• A culture founded on safety, integrity, inclusion, and belonging.
• Flexible working arrangements that support your well‑being and potential.
• Opportunities to make a real‑world impact through our global giving and volunteering programmes.
• Up to 10% pension.
• 24 days plus 10 days bought holidays.
• Free medical and income protection insurance.

EEO Statement

We are a disability confident employer and welcome applications from candidates who require flexible working or who may not meet all the listed requirements for a role.

We are committed to providing reasonable adjustments during the recruitment process where needed.

#J-18808-Ljbffr