Cybersecurity Engineer

About Us: Prometric is a leading provider of technology-enabled testing and assessment solutions to many of the world’s most recognized licensing and certification organizations, academic institutions, and government agencies. We support more than 7 million test takers annually at our testing locations in 180 countries around the world. With over three decades of experience working with clients of all sizes across a multitude of industry sectors, our mission is to design and deliver the highest quality and most innovative testing solutions anytime, anywhere.

Cybersecurity Engineer – Endpoint Security

Job Overview:

Prometric is seeking a Cybersecurity Engineer with a primary focus on endpoint security, device management, and data protection technologies. This role is responsible for securing and managing enterprise endpoints using Microsoft Defender, Intune, Purview, and related Microsoft security technologies. The engineer will design, implement, and maintain security controls for corporate and BYOD environments while supporting compliance, threat detection, incident response, and endpoint hardening initiatives. The ideal candidate combines strong technical expertise with a proactive security mindset and the ability to work across IT, Infrastructure, Identity Management, Compliance, and Security Operations teams.

Primary Responsibilities Endpoint Security Administration

• Design, deploy, and manage Microsoft Defender for Endpoint across Windows, macOS, and mobile devices.
• Monitor endpoint security alerts, investigate threats, and coordinate remediation activities.
• Develop and maintain endpoint protection policies, attack surface reduction rules, and endpoint hardening standards.
• Optimize Defender configurations to improve threat detection while minimizing operational impact.

Device Management & Intune

• Administer Microsoft Intune for endpoint configuration, compliance, application deployment, and lifecycle management.
• Develop and maintain device compliance policies, security baselines, and configuration profiles.
• Support Autopilot provisioning and device enrollment processes.
• Manage patching and update policies for corporate endpoints.

BYOD & Mobile Security

• Design and maintain secure BYOD and mobile device management solutions.
• Implement Conditional Access, device compliance, and application protection policies.
• Support secure access controls for personally owned devices accessing corporate resources.
• Evaluate emerging mobile security capabilities and recommend improvements.

Data Protection & Purview

• Administer and support Microsoft Purview capabilities including Information Protection, Data Lifecycle Management, Data Loss Prevention, Records Management, Insider Risk Management, and eDiscovery.
• Design and maintain data classification frameworks, sensitivity labels, retention policies, and information governance controls across Microsoft 365.
• Partner with Legal, Privacy, Compliance, and Security teams to implement data protection and regulatory compliance requirements.
• Support investigations, legal holds, eDiscovery requests, and data governance initiatives.

Continuous Improvement

• Research emerging endpoint threats and security technologies.
• Identify opportunities for automation and process improvement.
• Participate in incident response investigations involving endpoint, device, or data security events.
• Provide technical guidance and mentorship to junior team members and IT staff.

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field (or equivalent experience).
• 3–5+ years of cybersecurity or endpoint engineering experience.
• Hands-on experience managing Microsoft Defender for Endpoint.
• Hands-on experience administering Microsoft Intune in an enterprise environment.
• Experience in implementing and managing Microsoft Purview DLP and Information Protection.
• Strong understanding of Windows endpoint security, device management, and modern authentication.
• Experience with Conditional Access, MFA, endpoint compliance, and Zero Trust principles.
• Knowledge of endpoint hardening methodologies and security frameworks.
• Strong troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Microsoft Security certifications (SC-200, SC-300, SC-400, AZ-500, MD-102, or equivalent).
• Experience with Defender XDR and Microsoft Security Copilot.
• Experience supporting BYOD and mobile security programs.
• Familiarity with vulnerability management platforms such as Tenable or Qualys.
• Experience with identity security technologies including Entra ID, PIM, and Conditional Access.
• Familiarity with ISO 27001, NIST Cybersecurity Framework, PCI DSS, or SOC 2 requirements.

Prometric is an Equal Employment/Affirmative Action employer. We do not discriminate in hiring based on sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state, and local law.