The Role
Contract Security & Endpoint Engineer to implement browser extension security controls, evaluate and deploy endpoint tooling, enforce allowlisting and governance, and support PAM, device hardening, endpoint compliance, Zero Trust, automation, and cross-functional security initiatives.
Summary Generated by Built In
This is a remote position.
Security & Endpoint Engineer (5–8 Years)
Role Overview
We are seeking an experienced Security & Endpoint Engineer Contractor to support strategic
security initiatives across Dropbox’s endpoint environment.
This role will initially focus on implementing enterprise-wide browser and extension security
controls, including visibility, governance, allowlisting, risk assessment, and enforcement
capabilities for browser extensions, developer plugins, and AI-enabled tools.
The contractor will partner closely with Security, CorpFleet, Identity, and Infrastructure teams to
evaluate, deploy, and operationalize security tooling that reduces client-side risk and
strengthens Dropbox’s security posture.
Initial Project Focus
Client-Side Extension Security & Execution Control
Key responsibilities include:
● Evaluate and perform proof-of-concept testing for browser extension security platforms.
● Assess browser extensions, developer plugins, and AI-enabled tools for security and
compliance risk.
● Define extension governance, approval workflows, and allowlisting processes.
● Implement monitoring, reporting, and visibility capabilities.
● Support enforcement controls to prevent unauthorized extension usage and reduce data
exfiltration risk.
● Develop operational processes, documentation, and support models for ongoing
management.
Following the initial project, the contractor will support additional security initiatives across
endpoint management, Privileged Access Management (PAM), device hardening, endpoint
compliance, and Zero Trust programs.
Key Responsibilities
Endpoint Security & Hardening
● Support enterprise endpoint security initiatives across macOS, Windows & Linux
● Implement and maintain endpoint security controls and hardening standards.
● Assist with vulnerability remediation and endpoint compliance activities.
● Support Zero Trust and device trust initiatives.
● Partner with endpoint engineering teams to balance security requirements with user
experience.
Privileged Access Management
● Support implementation and operational management of PAM solutions such as Delinea.
● Assist with privileged account governance, access reviews, and least-privilege initiatives.
● Partner with Security and Identity teams to strengthen administrative access controls.
Security Operations & Compliance
● Participate in security assessments, audits, and compliance programs.
● Produce operational documentation, runbooks, and implementation guides.
● Track remediation activities, risk exceptions, and security metrics.
● Support audit readiness and evidence collection activities.
Automation & Tooling
● Develop automation and scripts to improve security operations and reduce manual effort.
● Integrate security tools with enterprise platforms and workflows.
● Build dashboards and reporting capabilities to improve visibility and operational
effectiveness.
Cross-Functional Collaboration
● Work closely with Security, CorpFleet, Infrastructure, and Identity teams.
● Participate in vendor evaluations, proof-of-concepts, and implementation planning.
● Present technical recommendations, findings, and project status updates to
stakeholders.
Required Skills & Experience
● 5–8 years of experience in Security Engineering, Endpoint Engineering, Systems
Engineering, or a related field.
● Strong understanding of endpoint security principles and enterprise device management.
● Experience supporting macOS and Windows environments at scale.
● Experience with browser security, extension governance, and endpoint security tooling.
● Experience with endpoint management tools such as Jamf, Intune, FleetDM, or similar
● Understanding of Zero Trust security principles and least-privilege access models.
● Strong scripting skills using Python, PowerShell, Bash, or similar technologies.
● Excellent troubleshooting, analytical, and problem-solving skills.
● Strong written and verbal communication skills.
Preferred Qualifications
● Experience with browser extension security platforms such as KOI Security, LayerX,
SQRX, or similar solutions.
● Experience with Privileged Access Management platforms such as Delinea, CyberArk, or
BeyondTrust.
● Experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, or
SentinelOne.
● Familiarity with enterprise security technologies including Okta, Zscaler, and Microsoft
Security solutions.
● Experience supporting SOC 2, ISO 27001, NIST, or similar security frameworks.
● Understanding of AI security risks, browser-based AI tools, and governance controls.
Success Measures During the initial engagement, success will be measured by
● Successful evaluation and recommendation of browser extension security tooling.
● Deployment and operationalization of approved extension security controls.
● Improved visibility into browser extension usage across the environment.
● Implementation of governance, allowlisting, and enforcement processes.
● Contribution to broader endpoint security and PAM initiatives.
● Creation of sustainable documentation, runbooks, and operational procedures.
Skills Required
- 5-8 years of experience in Security Engineering, Endpoint Engineering, Systems Engineering, or related field
- Strong understanding of endpoint security principles and enterprise device management
- Experience supporting macOS and Windows environments at scale
- Experience with browser security, extension governance, and endpoint security tooling
- Experience with endpoint management tools such as Jamf, Intune, FleetDM, or similar
- Understanding of Zero Trust security principles and least-privilege access models
- Strong scripting skills using Python, PowerShell, Bash, or similar
- Excellent troubleshooting, analytical, and problem-solving skills
- Strong written and verbal communication skills
- Experience with browser extension security platforms such as KOI Security, LayerX, SQRX, or similar solutions
- Experience with Privileged Access Management platforms such as Delinea, CyberArk, or BeyondTrust
- Experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, or SentinelOne
- Familiarity with enterprise security technologies including Okta, Zscaler, and Microsoft Security solutions
- Experience supporting SOC 2, ISO 27001, NIST, or similar security frameworks
- Understanding of AI security risks, browser-based AI tools, and governance controls
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
SRM Technologies is a global IT services company specialising in automotive technologies, digital transformation and product engineering services. We provide technology consulting, platform development, data analytics, artificial intelligence, cloud enablement, digital infrastructure, quality assurance, embedded software and design to manufacturing product solutions to various industries and enterprises across the North America, Japan, Europe and India. At the heart of our organization are passionate employees who embody our core belief - 'ideas@work.' We firmly believe that ideas and innovation truly matter only when they create a meaningful impact on our customers' businesses and the lives of their end customers. Therefore, we prioritize the practical application of these ideas and their transformative impact through our talented and ever-growing workforce. 𝘚𝘙𝘔 𝘛𝘦𝘤𝘩 𝘪𝘴 𝘢 𝘱𝘳𝘰𝘶𝘥 𝘮𝘦𝘮𝘣𝘦𝘳 𝘰𝘧 𝘵𝘩𝘦 𝘚𝘙𝘔 𝘎𝘳𝘰𝘶𝘱, 𝘢 𝘮𝘶𝘭𝘵𝘪𝘯𝘢𝘵𝘪𝘰𝘯𝘢𝘭 𝘤𝘰𝘯𝘨𝘭𝘰𝘮𝘦𝘳𝘢𝘵𝘦 𝘸𝘪𝘵𝘩 𝘢 𝘳𝘪𝘤𝘩 𝘩𝘪𝘴𝘵𝘰𝘳𝘺 𝘴𝘱𝘢𝘯𝘯𝘪𝘯𝘨 𝘰𝘷𝘦𝘳 𝘧𝘰𝘶𝘳 𝘥𝘦𝘤𝘢𝘥𝘦𝘴. 𝘛𝘩𝘦 𝘚𝘙𝘔 𝘎𝘳𝘰𝘶𝘱 𝘰𝘱𝘦𝘳𝘢𝘵𝘦𝘴 𝘪𝘯 𝘥𝘪𝘷𝘦𝘳𝘴𝘦 𝘴𝘦𝘤𝘵𝘰𝘳𝘴, 𝘪𝘯𝘤𝘭𝘶𝘥𝘪𝘯𝘨 𝘌𝘥𝘶𝘤𝘢𝘵𝘪𝘰𝘯, 𝘛𝘦𝘤𝘩𝘯𝘰𝘭𝘰𝘨𝘺, 𝘏𝘦𝘢𝘭𝘵𝘩𝘤𝘢𝘳𝘦, 𝘢𝘯𝘥 𝘔𝘦𝘥𝘪𝘢
.jpeg)
