Senior Software Engineer II- 2026_453
Marriott Tech Accelerator
Job Description
Role Title: Senior Software Engineer II Position ID- 2026_453 Experience Range: 6+ years Work location: Hyderabad, India. Work mode: Hybrid Engineer Mac and Windows Endpoint Vulnerability & Platform Automation Job Summary: The Mac and Windows Endpoint Vulnerability & Platform Automation engineer is a hands-on technical role responsible for engineering, operating, and continuously improving endpoint vulnerability management across enterprise Mac and Windows environments. This role serves as a technical authority for vulnerability remediation, platform automation, and data-driven risk analysis across Microsoft Intune and Microsoft Configuration Manager (SCCM), partnering closely with Security, Product, and Operations teams to reduce endpoint risk at scale.
Key Responsibilities: Endpoint Vulnerability Management: Vulnerability management for Mac and Windows endpoints, including detection, prioritization, remediation, validation, and reporting. Translate OS, application, and configuration vulnerabilities into automated remediation actions using Intune and SCCM. Partner closely with Information Security to operationalize vulnerability intelligence into enforceable endpoint controls.
Track remediation SLAs and ensure measurable reduction in endpoint risk over time. Cross-System Data Analysis & Risk Correlation Analyze and correlate data across Intune, SCCM, endpoint security tools, compliance platforms, log analytics, and reporting dashboards. Identify vulnerability trends, recurring failure patterns, and systemic root causes.
Differentiate true risk from false positives and environmental constraints using multi-source validation. Prioritize remediation based on risk, exposure, device population, and business impact. Automation & Platform Engineering Design and maintain automated remediation workflows using Intune remediation scripts, proactive remediations, and SCCM baselines.
Develop version-controlled scripts for configuration hardening, patch enforcement, and post-deployment validation. Enable off-network detection and remediation using cloud-based management capabilities. Continuously improve endpoint reliability and compliance through automation rather than manual intervention.
Frequent Endpoint Vulnerability Examples: Outdated or unsupported Windows or macOS versions Missing or delayed operating system security patches Unpatched third-party applications (browsers, productivity tools, runtimes) Configuration drift from security baselines Disk encryption not enabled or misconfigured (BitLocker / FileVault) Unsupported or end-of-life hardware or OS builds Endpoints failing to check in or report compliance Failed or partially applied security or compliance policies Legacy agents or tooling causing conflicts Off-network devices falling out of compliance Required Qualifications: 5+ years of experience managing enterprise Windows and/or macOS endpoints. Strong hands-on experience with Microsoft Intune. Working knowledge of Microsoft Configuration Manager (SCCM).
Proven ability to analyze and correlate data across multiple systems. Strong scripting skills (PowerShell/python; Bash or shell scripting for macOS). Strong experience with Microsoft 365 Security.
Power BI is nice to have Experience operationalizing vulnerability management at enterprise scale. Preferred Qualifications: Experience supporting large, globally distributed endpoint environments. Familiarity with endpoint security, compliance, and vulnerability tooling.
Experience integrating endpoint data into reporting platforms such as Power BI or Log Analytics. Experience operating in audit-heavy or regulated environments. Business Impact This role is critical to reducing enterprise endpoint risk by ensuring vulnerabilities are identified through data-driven analysis and remediated through scalable automation.
The engineer enables consistent compliance across Mac and Windows platforms, improves security posture for off-network devices, and reduces operational effort through standardized, repeatable solutions. Education and Certifications: Undergraduate degree or equivalent experience/certification