Primary

Perform hands‑on endpoint hardening activities to reduce enterprise attack surface across workstations and servers by enforcing secure configurations, minimizing unnecessary services, and supporting execution control mechanisms under established standards and guidance.

Support application execution control and endpoint attack surface reduction through day‑to‑day administration of Airlock application allowlisting, including policy updates, rule maintenance, and exception handling following approved processes

Review, triage, and process Airlock allowlisting requests from application and infrastructure teams, performing technical validation and escalating complex or high‑risk cases to senior engineers as required.

Assist with maintaining endpoint security baselines by implementing configuration changes, validating compliance, and documenting deviations or operational impacts.

Provide operational support for ...