Device Security Engineer

Endava is seeking an experienced Device Security Engineer to support the design governance and continuous improvement of enterprise device security controls across endpoints mobile devices servers and emerging device platforms.

This hands-on role is responsible for defining secure device architecture standards engineering device hardening baselines and ensuring protective security controls are effectively implemented across managed devices. The Device Security Engineer will work closely with Infrastructure Cloud End User Computing and Security Operations teams to strengthen endpoint protection device compliance and operational security across enterprise environments.

The role also contributes to broader cyber security initiatives such as Zero Trust device posture privileged access governance device identity enforcement and integration of endpoint telemetry into security monitoring and incident response processes.

Responsibilities:

• Define and maintain device security standards policies and architectural patterns for endpoints servers and mobile devices.
• Develop and govern device hardening baselines and configuration standards aligned with enterprise security policies and compliance frameworks.
• Improve device compliance posture by implementing consistent security policies reporting and remediation processes.
• Partner with Infrastructure and End User Computing teams to manage device lifecycle security including provisioning patching compliance enforcement and decommissioning.
• Engineer and maintain device protection platforms such as EDR antivirus and device management solutions.
• Ensure device protection controls are configured correctly and provide effective coverage across the enterprise environment.
• Define and enforce device identity and access security requirements including conditional access readiness device compliance policies and privileged access controls.
• Support remediation of device security risks high-risk configurations and compliance gaps based on business impact and threat intelligence.
• Act as a device security subject matter expert during cyber incidents involving endpoints or managed devices.
• Maintain device security documentation including baseline builds configuration standards and secure device deployment patterns.
• Collaborate with SOC and Cyber Defence teams to ensure endpoint telemetry supports effective monitoring detection and response workflows.
• Support automation and continuous improvement initiatives for device compliance enforcement configuration management and reporting.

Qualifications :

Experience:

• 810 years of experience in IT infrastructure or cybersecurity with at least 5 years in endpoint or device security engineering roles.
• Hands-on experience implementing and managing enterprise device security controls and endpoint protection platforms.
• Experience with endpoint and mobile device management technologies such as Microsoft Intune JAMF Tanium or equivalent platforms.
• Experience with endpoint security platforms such as CrowdStrike or Microsoft Defender for Endpoint.
• Proven experience collaborating with infrastructure cloud and endpoint operations teams to manage device security controls and compliance.
• Experience working with managed service providers or outsourced operations models for security tooling management.
• Experience supporting incident response device remediation activities and security investigations involving endpoints.
• Relevant security certifications such as CISSP endpoint security certifications or vendor-specific certifications are desirable.
   

Technical Skills:

• Strong knowledge of endpoint and device security architecture including:
  • Device hardening and secure configuration management
  • Endpoint protection and EDR technologies
  • Device compliance enforcement and policy management
  • Endpoint encryption and secure storage controls
• Hands-on experience with enterprise device security tooling including:
  • Microsoft Intune / Endpoint Manager
  • JAMF
  • Tanium
  • CrowdStrike
  • Microsoft Defender security suite
• Understanding of device identity and access security including conditional access device compliance gates and privileged access controls.
• Experience integrating endpoint telemetry into security monitoring platforms such as SIEM or XDR.
• Strong troubleshooting and problem-solving skills related to endpoint security controls and device management platforms.
• Understanding of modern endpoint attack techniques including ransomware lateral movement and credential theft.
• Familiarity with Zero Trust security principles and secure device posture models.

Additional Information :

Discover some of the global benefits that empower our people to become the best version of themselves:

• Finance: Competitive salary package share plan company performance bonuses value-based recognition awards referral bonus;   
• Career Development: Career coaching global career opportunities non-linear career paths internal development programmes for management and technical leadership;
• Learning Opportunities: Complex projects rotations internal tech communities training certifications coaching online learning platforms subscriptions pass-it-on sessions workshops conferences;
• Work-Life Balance: Hybrid work and flexible working hours employee assistance programme;
• Health: Global internal wellbeing programme access to wellbeing apps;
• Community: Global internal tech communities hobby clubs and interest groups inclusion and diversity programmes events and celebrations.

At Endava were committed to creating an open inclusive and respectful environment where everyone feels safe valued and empowered to be their best. We welcome applications from people of all backgrounds experiences and perspectivesbecause we know that inclusive teams help us deliver smarter more innovative solutions for our customers. Hiring decisions are based on merit skills qualifications and potential. If you need adjustments or support during the recruitment process please let us know.

Remote Work :

No

Employment Type :

Full-time