Staff Engineer, Endpoint Security

Nscale is a GPU cloud engineered for AI, providing high-performance infrastructure for AI start-ups and large enterprises. The role involves building and operating endpoint and device security for Nscale employees and stakeholders, focusing on creating a measurable operating model for security across various device types.

Responsibilities:

• Own endpoint and device security architecture across employee devices, engineering workstations, privileged admin devices, and site-support endpoints
• Define secure baseline standards for operating systems, browsers, disk encryption, host firewalls, endpoint telemetry, and configuration hardening
• Develop practical device standards for remote workers, office users, data center staff, contractors, and high-risk user populations
• Establish device posture requirements for access to enterprise applications, production systems, privileged workflows, and sensitive data
• Integrate endpoint posture with identity, privileged access, vulnerability management, and detection workflows
• Partner with Identity and Privileged Access teams to support high-risk application and production access decisions
• Drive local admin reduction and controlled elevation patterns that reduce risk without creating operational dead ends
• Lead endpoint rollout readiness, including deployment sequencing, exception handling, user communication, rollback planning, and adoption metrics
• Create an exception model with clear ownership, risk documentation, compensating controls, expiry, and review cadence
• Define endpoint telemetry requirements to support investigations, detection engineering, audit evidence, and executive reporting
• Build visibility into device security posture through dashboards covering coverage, stale devices, unmanaged endpoints, local admin status, and telemetry health
• Measure progress through metrics such as coverage, unmanaged devices, local admin reduction, hardening compliance, and endpoint detection health

Requirements:

• 7+ years in endpoint security, device management, enterprise security engineering, infrastructure security, or related engineering roles
• Hands-on experience securing Windows, macOS, and/or Linux endpoints in enterprise environments
• Experience with device management, endpoint detection, OS hardening, disk encryption, browser security, host firewalls, and endpoint telemetry
• Experience reducing standing local admin privileges or implementing controlled elevation models
• Strong scripting, automation, packaging, configuration, or endpoint workflow engineering skills
• Ability to balance strong endpoint controls with user experience, operational reliability, and business velocity
• Experience partnering with IT, identity, infrastructure, security operations, legal, privacy, and business stakeholders
• Experience securing high-risk engineering populations, data center support teams, privileged administrators, or remote-first workforces
• Experience using device posture in conditional access, privileged access, or production access decisions
• Experience producing audit-ready evidence for device controls and endpoint security posture