{"id":2505360,"url":"https://alion.io/job/charge-point-senior-endpoint-security-engineer","title":"Senior Endpoint Security Engineer","company":{"id":21004,"name":"Charge Point","domain":"chargepoint.com","url":"https://alion.io/company/charge-point","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Assembly","optional":false},{"name":"Bash","optional":false},{"name":"CentOS Stream","optional":false},{"name":"Chef","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Configuration Management","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Debian","optional":false},{"name":"DLP","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"NIST CSF","optional":false},{"name":"OSSEC","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Puppet","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"Swift","optional":false},{"name":"Sysmon","optional":false},{"name":"Ubuntu","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true},{"name":"BeyondTrust","optional":true},{"name":"CyberArk","optional":true},{"name":"Okta","optional":true},{"name":"osquery","optional":true},{"name":"Ping Identity","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"Velociraptor","optional":true}],"status":"live","first_seen_at":"2026-06-09T04:50:25Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-14T22:22:27Z","board_verified":true,"closed_at":null,"days_open":127,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":127},"description":"About Us\nWith electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.\nSince our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.\nAt ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.\nJoin the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.\nReports To\nDirector, AI and Information Security\nWe are looking for a Senior Endpoint Security Engineer with deep expertise across Windows, macOS, and Linux environments to lead and mature our endpoint security programme. You will be responsible for the design, deployment, and continuous improvement of our endpoint protection, detection, and response capabilities, as well as our Mobile Device Management (MDM) infrastructure. Working closely with IT, security operations, and compliance teams, you will ensure that every managed device across the organisation meets the highest security standards - from first enrolment to decommission.\nWhat You Will Bring to ChargePoint\nEndpoint Protection & Hardening\nDefine, implement, and enforce endpoint security baselines and hardening standards across Windows, macOS, and Linux platforms in alignment with CIS Benchmarks, NIST guidelines, and organisational policy.\nDeploy, manage, and tune Endpoint Detection and Response (EDR) solutions (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or equivalent) across all device types.\nImplement and maintain antivirus, anti-malware, host-based firewall, application allowlisting/blocklisting, and data loss prevention (DLP) controls.\nConduct regular endpoint vulnerability assessments and drive timely remediation in coordination with IT and asset owners.\nManage full-disk encryption across platforms - BitLocker (Windows), FileVault (macOS), and LUKS/dm-crypt (Linux).\nMobile Device Management (MDM)\nArchitect, deploy, and manage enterprise MDM solutions - including Jamf Pro (macOS/iOS), Microsoft Intune, VMware Workspace ONE, or equivalent platforms - across the organisation's full device fleet.\nDesign and enforce MDM enrolment workflows, device compliance policies, configuration profiles, and conditional access rules.\nManage application lifecycle through MDM - packaging, deployment, patching, and removal across managed endpoints.\nDefine and maintain device compliance baselines; integrate MDM compliance signals with identity and access management (IAM) and Zero Trust frameworks.\nOversee BYOD and corporate-owned device policies, ensuring appropriate segregation of personal and corporate data.\nManage certificate lifecycle and PKI integration for device authentication and Wi-Fi/VPN access.\nWindows Endpoint Security\nManage and harden Windows endpoints using Group Policy (GPO), Microsoft Endpoint Configuration Manager (MECM/SCCM), and Microsoft Intune.\nImplement and maintain Windows Defender suite - Defender Antivirus, Defender for Endpoint, Defender Firewall, and Attack Surface Reduction (ASR) rules.\nOversee Windows patch management processes ensuring timely deployment of OS and application updates.\nConfigure and monitor Windows Event Logging, Sysmon, and audit policies for comprehensive endpoint telemetry.\nmacOS Endpoint Security\nManage macOS fleet security using Jamf Pro - configuration profiles, extension attributes, smart groups, policies, and patch management.\nImplement macOS security controls including system integrity protection (SIP), Gatekeeper, TCC (Transparency, Consent & Control), and secure boot settings.\nDevelop and maintain custom Jamf scripts (Bash, Python, Swift) for automation, remediation, and compliance reporting.\nManage macOS MDM enrolment via Apple Business Manager (ABM) / Apple School Manager (ASM) and DEP/ADE workflows.\nLinux Endpoint Security\nHarden Linux endpoints (Ubuntu, RHEL, CentOS, Debian, or equivalent) using industry-standard security frameworks and configuration management tools (Ansible, Chef, Puppet, or similar).\nImplement and manage SELinux / AppArmor policies, auditd configurations, and host-based intrusion detection (OSSEC, Wazuh, or equivalent).\nManage Linux patch management and software inventory using tools such as Landscape, Ansible, or Satellite.\nMonitor and respond to Linux endpoint security events using EDR agents and SIEM integrations.\nThreat Detection & Incident Response\nTriage and respond to endpoint security alerts and incidents - containment, investigation, eradication, and recovery.\nPerform endpoint forensic analysis including memory forensics, disk imaging, and log analysis during security incidents.\nDevelop and maintain endpoint-specific detection rules, threat hunting queries, and playbooks.\nCollaborate with the SOC/SIEM team to enrich endpoint telemetry and improve detection coverage.\nCompliance & Governance\nEnsure endpoint security posture meets compliance requirements for relevant frameworks (SOC 2, ISO 27001, CIS Controls, NIST CSF, PCI-DSS, HIPAA where applicable).\nMaintain endpoint asset inventory and configuration management database (CMDB) accuracy.\nProduce regular endpoint compliance and health reports for security leadership and audit purposes.\nDevelop and enforce acceptable use, BYOD, and device security policies.\nLeadership & Collaboration\nMentor junior and mid-level endpoint security engineers and IT operations staff.\nDefine endpoint security roadmap and drive continuous improvement initiatives.\nEvaluate and onboard new endpoint security tooling; manage vendor relationships.\nCollaborate with HR and IT on joiners/movers/leavers processes to ensure secure device provisioning and deprovisioning.\nRequirements\n4-7 years of hands-on experience in endpoint security, systems administration, or a closely related field.\nExpert-level knowledge of Windows endpoint security - Group Policy, Intune, SCCM/MECM, Defender for Endpoint, and Windows hardening.\nExpert-level knowledge of macOS endpoint security - Jamf Pro, Apple Business Manager, configuration profiles, and macOS security controls.\nSolid experience with Linux endpoint security - hardening, SELinux/AppArmor, auditd, and Linux-based EDR/HIDS solutions.\nDeep, proven experience with enterprise MDM platforms (Jamf Pro, Microsoft Intune, Workspace ONE, or equivalent) in a large-scale environment.\nHands-on experience with EDR/EPP platforms (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, or equivalent).\nStrong scripting skills for automation and endpoint management - Bash, PowerShell, Python, and/or Swift.\nSolid understanding of PKI, certificate management, and secure authentication (SAML, OAuth, SCIM, conditional access).\nFamiliarity with SIEM platforms and endpoint telemetry integration (Splunk, Microsoft Sentinel, Elastic, or equivalent).\nStrong knowledge of endpoint security frameworks: CIS Benchmarks, NIST SP 800-70, DISA STIGs.\nNice to Have\nExperience with Zero Trust Network Access (ZTNA) and integration of MDM compliance with identity providers (Okta, Azure AD, Ping Identity).\nFamiliarity with privileged access management (PAM) tools (CyberArk, BeyondTrust, or similar).\nExposure to mobile security (iOS, Android) within an MDM context.\nExperience with vulnerability management platforms (Tenable, Qualys, Rapid7).\nKnowledge of macOS and Linux forensics tooling (osquery, Velociraptor, or similar).\nRelevant certifications: CISSP, CISM, CompTIA Security+, CEH, Microsoft SC-300/MD-102, Jamf Certified Admin/Expert, CrowdStrike CCFA/CCFR, or equivalent.\nLocation\nGurgaon/Bangalore/Remote\nWe are committed to an inclusive and diverse team. ChargePoint is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status. \nIf there is a match between your experiences/skills and the Company needs, we will contact you directly.\nChargePoint is committed to fostering an inclusive workplace that welcomes and supports all qualified individuals. In alignment with this commitment, we ensure that persons with disabilities are provided with reasonable accommodations throughout the employment process.\nIf you need a reasonable accommodation to participate in the application or interview process, to perform essential job functions, or to access any other benefits and privileges of employment, please contact us at .\nChargePoint is an equal opportunity employer. \nApplicants only - Recruiting agencies do not contact.","description_format":"text","description_chars":9490,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management","EV Charging"],"lifecycle":[{"event":"open","at":"2026-10-14T07:13:24Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.262,"p_room":0.28,"age_days":127,"expected_fill_days":23,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-15T00:46:07Z"},"pay":null,"html_url":"https://alion.io/job/charge-point-senior-endpoint-security-engineer","json_url":"https://alion.io/job/charge-point-senior-endpoint-security-engineer.json","meta":{"generated_at":"2026-10-15T00:46:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":898,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":21004},"rest":"https://alion.io/mcp/rest/get_company?id=21004"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcharge-point-senior-endpoint-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcharge-point-senior-endpoint-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcharge-point-senior-endpoint-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/charge-point-senior-endpoint-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcharge-point-senior-endpoint-security-engineer"}]}