Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 140 days ago

Senior Endpoint Security Engineer

ChargePoint40 open roles

Where
IN-HR-Gurugram-418-419
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Endpoint Security EngineerChargePoint · IN-HR-Gurugram-418-419

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ChargePoint's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. ChargePoint postings stay open a median of 20 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 140 days ago

ChargePoint median: 20 days open

The posting

About Us

With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.

Since our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.

At ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.

Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.

Reports To

Director, AI and Information Security

We are looking for a Senior Endpoint Security Engineer with deep expertise across Windows, macOS, and Linux environments to lead and mature our endpoint security programme. You will be responsible for the design, deployment, and continuous improvement of our endpoint protection, detection, and response capabilities, as well as our Mobile Device Management (MDM) infrastructure. Working closely with IT, security operations, and compliance teams, you will ensure that every managed device across the organisation meets the highest security standards — from first enrolment to decommission.

What You Will Bring to ChargePoint

Endpoint Protection & Hardening

  • Define, implement, and enforce endpoint security baselines and hardening standards across Windows, macOS, and Linux platforms in alignment with CIS Benchmarks, NIST guidelines, and organisational policy.
  • Deploy, manage, and tune Endpoint Detection and Response (EDR) solutions (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or equivalent) across all device types.
  • Implement and maintain antivirus, anti-malware, host-based firewall, application allowlisting/blocklisting, and data loss prevention (DLP) controls.
  • Conduct regular endpoint vulnerability assessments and drive timely remediation in coordination with IT and asset owners.
  • Manage full-disk encryption across platforms — BitLocker (Windows), FileVault (macOS), and LUKS/dm-crypt (Linux).

Mobile Device Management (MDM)

  • Architect, deploy, and manage enterprise MDM solutions — including Jamf Pro (macOS/iOS), Microsoft Intune, VMware Workspace ONE, or equivalent platforms — across the organisation's full device fleet.
  • Design and enforce MDM enrolment workflows, device compliance policies, configuration profiles, and conditional access rules.
  • Manage application lifecycle through MDM — packaging, deployment, patching, and removal across managed endpoints.
  • Define and maintain device compliance baselines; integrate MDM compliance signals with identity and access management (IAM) and Zero Trust frameworks.
  • Oversee BYOD and corporate-owned device policies, ensuring appropriate segregation of personal and corporate data.
  • Manage certificate lifecycle and PKI integration for device authentication and Wi-Fi/VPN access.

Windows Endpoint Security

  • Manage and harden Windows endpoints using Group Policy (GPO), Microsoft Endpoint Configuration Manager (MECM/SCCM), and Microsoft Intune.
  • Implement and maintain Windows Defender suite — Defender Antivirus, Defender for Endpoint, Defender Firewall, and Attack Surface Reduction (ASR) rules.
  • Oversee Windows patch management processes ensuring timely deployment of OS and application updates.
  • Configure and monitor Windows Event Logging, Sysmon, and audit policies for comprehensive endpoint telemetry.

macOS Endpoint Security

  • Manage macOS fleet security using Jamf Pro — configuration profiles, extension attributes, smart groups, policies, and patch management.
  • Implement macOS security controls including system integrity protection (SIP), Gatekeeper, TCC (Transparency, Consent & Control), and secure boot settings.
  • Develop and maintain custom Jamf scripts (Bash, Python, Swift) for automation, remediation, and compliance reporting.
  • Manage macOS MDM enrolment via Apple Business Manager (ABM) / Apple School Manager (ASM) and DEP/ADE workflows.

Linux Endpoint Security

  • Harden Linux endpoints (Ubuntu, RHEL, CentOS, Debian, or equivalent) using industry-standard security frameworks and configuration management tools (Ansible, Chef, Puppet, or similar).
  • Implement and manage SELinux / AppArmor policies, auditd configurations, and host-based intrusion detection (OSSEC, Wazuh, or equivalent).
  • Manage Linux patch management and software inventory using tools such as Landscape, Ansible, or Satellite.
  • Monitor and respond to Linux endpoint security events using EDR agents and SIEM integrations.

Threat Detection & Incident Response

  • Triage and respond to endpoint security alerts and incidents — containment, investigation, eradication, and recovery.
  • Perform endpoint forensic analysis including memory forensics, disk imaging, and log analysis during security incidents.
  • Develop and maintain endpoint-specific detection rules, threat hunting queries, and playbooks.
  • Collaborate with the SOC/SIEM team to enrich endpoint telemetry and improve detection coverage.

Compliance & Governance

  • Ensure endpoint security posture meets compliance requirements for relevant frameworks (SOC 2, ISO 27001, CIS Controls, NIST CSF, PCI-DSS, HIPAA where applicable).
  • Maintain endpoint asset inventory and configuration management database (CMDB) accuracy.
  • Produce regular endpoint compliance and health reports for security leadership and audit purposes.
  • Develop and enforce acceptable use, BYOD, and device security policies.

Leadership & Collaboration

  • Mentor junior and mid-level endpoint security engineers and IT operations staff.
  • Define endpoint security roadmap and drive continuous improvement initiatives.
  • Evaluate and onboard new endpoint security tooling; manage vendor relationships.
  • Collaborate with HR and IT on joiners/movers/leavers processes to ensure secure device provisioning and deprovisioning.

Requirements

  • 4-7 years of hands-on experience in endpoint security, systems administration, or a closely related field.
  • Expert-level knowledge of Windowsendpoint security — Group Policy, Intune, SCCM/MECM, Defender for Endpoint, and Windows hardening.
  • Expert-level knowledge of macOSendpoint security — Jamf Pro, Apple Business Manager, configuration profiles, and macOS security controls.
  • Solid experience with Linuxendpoint security — hardening, SELinux/AppArmor, auditd, and Linux-based EDR/HIDS solutions.
  • Deep, proven experience with enterprise MDM platforms(Jamf Pro, Microsoft Intune, Workspace ONE, or equivalent) in a large-scale environment.
  • Hands-on experience with EDR/EPP platforms (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, or equivalent).
  • Strong scripting skills for automation and endpoint management — Bash, PowerShell, Python, and/or Swift.
  • Solid understanding of PKI, certificate management, and secure authentication (SAML, OAuth, SCIM, conditional access).
  • Familiarity with SIEM platforms and endpoint telemetry integration (Splunk, Microsoft Sentinel, Elastic, or equivalent).
  • Strong knowledge of endpoint security frameworks: CIS Benchmarks, NIST SP 800-70, DISA STIGs.

Nice to Have

  • Experience with Zero Trust Network Access (ZTNA) and integration of MDM compliance with identity providers (Okta, Azure AD, Ping Identity).
  • Familiarity with privileged access management (PAM) tools (CyberArk, BeyondTrust, or similar).
  • Exposure to mobile security (iOS, Android) within an MDM context.
  • Experience with vulnerability management platforms (Tenable, Qualys, Rapid7).
  • Knowledge of macOS and Linux forensics tooling (osquery, Velociraptor, or similar).
  • Relevant certifications: CISSP, CISM, CompTIA Security+, CEH, Microsoft SC-300/MD-102, Jamf Certified Admin/Expert, CrowdStrike CCFA/CCFR, or equivalent.

Location Gurgaon/Bangalore/Remote

We are committed to an inclusive and diverse team. ChargePoint is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.

If there is a match between your experiences/skills and the Company needs, we will contact you directly.

ChargePoint is committed to fostering an inclusive workplace that welcomes and supports all qualified individuals. In alignment with this commitment, we ensure that persons with disabilities are provided with reasonable accommodations throughout the employment process.

If you need a reasonable accommodation to participate in the application or interview process, to perform essential job functions, or to access any other benefits and privileges of employment, please contact us at [email protected].

ChargePoint is an equal opportunity employer. Applicants only - Recruiting agencies do not contact.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ChargePoint's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ChargePoint's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ChargePoint's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.