Staff Endpoint Security Engineer

About Us

With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.

Since our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.

At ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.

Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.

Reports To

Senior Manager - Information Security

What You Will Be Doing

We are looking for a Staff Endpoint Security Engineer with deep expertise across Windows, macOS, and Linux environments to lead and mature our endpoint security programme. You will be responsible for the design, deployment, and continuous improvement of our endpoint protection, detection, and response capabilities, as well as our Mobile Device Management (MDM) infrastructure. Working closely with IT, security operations, and compliance teams, you will ensure that every managed device across the organisation meets the highest security standards — from first enrolment to decommission

What You Will Bring to ChargePoint

Endpoint Protection & Hardening

Define, implement, and enforce endpoint security baselines and hardening standards across Windows, macOS, and Linux platforms in alignment with CIS Benchmarks, NIST guidelines, and organisational policy.

Deploy, manage, and tune Endpoint Detection and Response (EDR) solutions (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or equivalent) across all device types.

Implement and maintain antivirus, anti-malware, host-based firewall, application allowlisting/blocklisting, and data loss prevention (DLP) controls.

Conduct regular endpoint vulnerability assessments and drive timely remediation in coordination with IT and asset owners.

Manage full-disk encryption across platforms — BitLocker (Windows), FileVault (macOS), and LUKS/dm-crypt (Linux).

Mobile Device Management (MDM)

Architect, deploy, and manage enterprise MDM solutions — including Jamf Pro (macOS/iOS), Microsoft Intune, VMware Workspace ONE, or equivalent platforms — across