Security Engineer, Endpoint and Device Security

Who are we?

Checkmarx is the enterprise application security leader and the host of Checkmarx One, the industry-leading cloud-native AppSec platform that helps enterprises build #DevSecTrust. Powered by the intelligence from our industry-leading AppSec security research team, and our AI-driven technology and services, our platform is designed to enable CISOs, AppSec and development leaders to prioritize their teams' focus on what impacts their business. Our offerings secure every phase of development for every application, from the very first line of code through production, while simultaneously balancing the dynamic needs of security and development teams. We are honored to serve more than 1,800 customers, which includes 60 percent of all Fortune 100 organizations. We are committed to moving forward with the unwavering dedication to the safety and security of our customers, and the applications that power our day-to-day lives.

What we are looking for?

We are looking for a Junior Security Engineer to join our Security Operations team and own the operational side of our endpoint and device-management stack.

The team is responsible for monitoring our environments, responding to alerts, and maintaining a strong security posture across our endpoint estate. This role focuses on keeping our fleet healthy, secure, and compliant: making sure every Mac and Windows device is configured correctly, encrypted, patched, and protected.

You will work closely with senior engineers on the team and with IT to manage our MDM platforms, support endpoint security operations, and contribute to compliance and audit efforts. This role offers a strong opportunity to grow professionally in the security field, with direct exposure to endpoint security, incident response, and a modern enterprise security stack.

How Will You Make an Impact?



• Own our macOS MDM platform: policy configuration, configuration profiles, and app deployment.
• Own our Windows MDM platform: configuration policies, compliance policies, and app deployment.
• Maintain device compliance baselines: disk encryption, OS patching, screen lock, and password policy.
• Drive enrollment programs, zero-touch provisioning, and device lifecycle hygiene.
• Investigate and remediate non-compliant devices.
• Partner with IT on onboarding and offboarding processes from the endpoint side.
• Operate the EDR platform alongside the rest of the team: alert triage, exclusion management, and policy tuning.
• Support compliance evidence collection and produce device-posture reports for audits and leadership.
• Provide SOC-style support during high-volume periods: alert triage and basic investigations.
  
  

• 1–2 years of hands-on experience in IT, IT Security, or sysadmin. Internships count.
• Hands-on experience with at least one MDM platform for macOS or Windows.
• Comfort with macOS and Windows administration.
• Basic scripting skills in Bash, PowerShell, or Python.
• Understanding of endpoint security fundamentals: disk encryption, EDR, patching, and OS hardening.
• Exposure to enterprise EDR platforms is a plus.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or CIS Benchmarks is a plus.
• Comfortable working directly with IT, HR, and end users.