Senior Endpoint Cybersecurity Engineer

Salary : $108,823.00 - $163,235.00 Annually

Location : Castle Rock, CO

Job Type : Full-Time Regular

Job Number : 2025 - 3004

Department : Information Technology

Opening Date : 11 / 13 / 2025

Closing Date : 12 / 19 / 2025 6 : 00 PM Mountain

FLSA : Exempt

Description

The Endpoint Cybersecurity Engineer is part of a team that performs three core functions for the County. The first is the day-to-day operations of the in-place security solutions. The second is the identification, investigation and resolution of security breaches detected by those systems. This person will ensure the secure operation of the in-house computer systems, servers, and network connections. This includes checking server and firewall logs, scrutinizing network traffic, and tracking suspicious computer activity. The third involves the day-to-day operations of the management toolsets we leverage for our endpoint environment, Microsoft Endpoint Configuration Manager and Microsoft Intune. This person will also analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion and conduct user activity and vulnerability audits where required. This position also includes work that is strategic in nature related to the Cyber Security roadmap.

This person will also participate in the improvement of the overall County Cyber Security Program. This will include support of the County cyber training and new cyber software installations.

Examples of Duties

ESSENTIAL DUTIES AND RESPONSIBILITIES : (The following examples are illustrative only and are not intended to be all inclusive.)

Operational Management (60%)

• Work with the IT operations team to maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (e.g., security tools) or not (e.g., workstations, servers, network devices, etc.).
• Maintain operational configurations of all in-place security solutions as per the established baselines.
• Build and secure the task sequences used to deploy our endpoints.
• Secure our infrastructure by deploying 1st and 3rd party patches on a schedule.
• Monitor all in-place security solutions for efficient and appropriate operations.
• Review logs and reports of all in-place devices, whether they be under direct control (e.g., security tools) or not (e.g., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
• Participate in investigations into problematic activity. Incident / breach troubleshooting and remediation may require potential after hours' support.
• Participate in the design and execution of vulnerability assessments, penetration tests and security audits.

Strategy & Planning (20%)

Acquisition & Deployment (20%)

Minimum Qualifications

QUALIFICATION REQUIREMENTS :

CERTIFICATES, LICENSES, REGISTRATIONS : At least one current certification in Cyber Security (e.g., CISA, CISM, CISSP, and / or Security+) is required. Suitable experience and education may be considered in lieu of certifications.

Supplemental Information

For more information on job functions, requirements and to apply please visit :

Douglas County offers an excellent comprehensive benefit package including but not limited to : Medical / Dental / Vision.

For a more detailed overview please view the full .

Douglas County offers a comprehensive benefit package. For a more detailed overview of our benefit package, click on the link below.

Why Douglas County? We offer excellent benefits to our employees!

Additionally, we offer dental, vision, accident / critical illness insurance, tuition reimbursement, and employee training. Part-time employees receive a pro-rated benefits package.