{"id":3537354,"url":"https://alion.io/job/vitol-com-endpoint-security-engineer","title":"Endpoint Security Engineer","company":{"id":691744,"name":"Vitol.com","domain":"vitol.com","url":"https://alion.io/company/vitol-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Geneva, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":83000,"max_usd":192000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Tanium","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-30T17:29:43Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-02T04:05:45Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Vitol is a leader in the energy sector with a presence across the spectrum: from oil through to power, renewables and carbon. From 40 offices worldwide, we seek to add value across the energy supply chain, including deploying our scale and market understanding to help facilitate the energy transition. To date, we have committed over $2 billion of capital to renewable projects, and are identifying and developing low-carbon opportunities around the world.\nOur people are our business. Talent is precious to us and we create an environment in which individuals can reach their full potential, unhindered by hierarchy. Our team comprises more than 65 nationalities and we are committed to developing and sustaining a diverse work force. Learn more about us here.\n Vitol is seeking an Endpoint Security Engineer to join its Technology department. The role is\naccountable for protecting Vitol's Endpoints (Desktops, Laptops, VDIs, Mobiles & Tablets) and\nthe Microsoft 365 workplace around them, across our worldwide operations.\nThe Endpoint Security Engineer will engineer and run endpoint protection with products such as\nCrowdStrike, Palo Alto, Tanium, and device management and compliance with\nIntune/AirWatch/Workspace One, and Microsoft 365 Security.\nThe role also plays a central part in Vitol's transformation and adoption of cloud-native device\nmanagement such as Microsoft Intune & Workspace One\nThe Endpoint Security Engineer will work closely with the CISO organization, the local IT Support\n& infrastructure teams, and the Cloud & Network teams.\nKey areas of responsibility for the Endpoint Security Engineer include:\n\nEndpoint Protection: Deploy, configure, and maintain Vitol’s security stack across the\nestate, covering sensor rollout and health, prevention and detection policies, exclusions,\ndevice control, and related settings.\n\nHardening & Patching: Maintain hardening baselines, disk encryption, patching, and\nvulnerability remediation across Windows, macOS, and mobile devices. Ensure Attack\nsurface reduction rules are applied across all devices.\n\nDevice Management: Engineer Intune for security, including compliance policies,\nconfiguration profiles, security baselines, app protection, and modern device provisioning.\n\nIntune Migration: Contribute to the rollout of Intune, making sure security controls carry over\nand improved, insuring configuration-as-code for Intune & conditional access\n\nIdentity & Access: Ensure Entra ID controls defined by the IAM team are well implemented\nand that tie access to device and identity health, including Conditional Access, device\ncompliance, and multi-factor authentication.\n\nMicrosoft 365 Security: Apply Microsoft 365 security and compliance controls relevant to\nendpoints, such as data loss prevention and information protection.\n\nIntegration: Integrate EDR and EPP systems with Intune and Entra ID so that device risk\ninforms access decisions.\n\nMonitoring & Reporting: Monitor endpoint security posture, and incidents with security\noperations, drive remediation to closure, and assess exposure to new threats.\n\nAutomation: Automate deployment, compliance checks, and reporting with PowerShell and\nthe Microsoft Graph API.\n\nStandards & Compliance: Maintain endpoint security standards, operating procedures, and\ndocumentation, and support audits aligned with ISO 27001, NIST, and CIS.\n\nDLP: Working in close collaboration with Cyber Security & Assurance to ensure proper\ndeployment of DLP rules and sensitivity labels across devices.\n Education: Undergraduate or postgraduate degree in a technical discipline (Computer\nScience, Engineering, Information Security, or a related field), or equivalent experience.\n\nEndpoint Security Experience: 5+ years of experience engineering endpoint security in an\nenterprise environment.\n\nEDR/EPP: Strong hands-on experience, covering deployment, policy design, tuning, and\ninvestigation with main EDR tools in the market such as CrowdStrike, Palo Alto, M365\nSecurity\n\nMicrosoft Intune: Strong hands-on experience across Windows, macOS, iOS, and Android.\n\nEntra ID: Solid knowledge of Entra ID, including Conditional Access, device identity, and\nmulti-factor authentication.\n\nMicrosoft 365/DLP: Very good knowledge of Microsoft 365 security and compliance\ncapabilities, Microsoft Pureview for retention policies and DLP.\n\nHardening & Vulnerability Management: Strong grasp of endpoint hardening, encryption,\npatching, and vulnerability management.\n\nScripting & Automation: Experience with PowerShell and the Microsoft Graph API.\n\nFrameworks: Working knowledge of the CIS, NIST, and ISO 27001 frameworks.\n\nSCCM & Intune: Experience with SCCM / Configuration Manager, and with migrating from it\nto Intune, is an advantage.\n\nCertifications: Microsoft MD-102, SC-200, or SC-300, or CrowdStrike Certified Falcon\nAdministrator (CCFA) or Responder (CCFR), CISSP/ISSEP is an advantage\n\nIndustry: Familiarity with commodity trading or financial services technology environments is\nan advantage.\n\nLanguages: Fluent English/French\n\nAnalytical & Improvement-Minded: Brings an analytical mindset and a focus on continuous\nimprovement.\n\nClear Communicator: Explains security decisions to both technical teams and end users,\nand documents them well.\n\nStakeholder Management: Balances security with a smooth working experience for traders\nand employees.\nHighly Collaborative: Works well with helpdesk, infrastructure, and security colleagues, and\nshares knowledge freely.\n\nPragmatic & Outcome-Oriented: Prioritizes by risk and sees remediation through to\nclosure.\n\nDecisive & Action-Oriented: Comfortable setting priorities and delivering at pace in a flat,\nhigh-ownership culture.","description_format":"text","description_chars":5667,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management","Fossil Fuels","Oil & Gas"],"lifecycle":[{"event":"open","at":"2026-10-30T18:05:46Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":48,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/vitol-com-endpoint-security-engineer","json_url":"https://alion.io/job/vitol-com-endpoint-security-engineer.json","meta":{"generated_at":"2026-11-02T07:52:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11087,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":691744},"rest":"https://alion.io/mcp/rest/get_company?id=691744"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvitol-com-endpoint-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvitol-com-endpoint-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvitol-com-endpoint-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vitol-com-endpoint-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvitol-com-endpoint-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3537354}},{"tool":"search_jobs","arguments":{"company":"vitol.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3537354},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}