Endpoint Engineer

The Endpoint Security Engineer is responsible for deploying, managing, and enhancing endpoint protection technologies across enterprise environments. This role focuses on securing endpoints, improving detection and response capabilities, and supporting continuous improvement of endpoint security operations. The engineer will collaborate with cross-functional teams to ensure endpoint controls align with organizational security standards and business needs.

• Deploy, configure, and maintain enterprise endpoint security solutions, including endpoint detection and response (EDR), endpoint firewall, and web gateway/proxy technologies.
• Monitor endpoint security tools, investigate alerts, troubleshoot issues, and escalate complex problems as needed.
• Ensure effective malware detection, prevention, and response coverage across all supported endpoint platforms.
• Collaborate with senior engineers, security operations, and infrastructure teams to implement endpoint security enhancements and best practices.
• Support the execution and evolution of the endpoint security roadmap through continuous improvement initiatives.
• Evaluate new endpoint security technologies and contribute to solution design and implementation recommendations.
• Identify opportunities for automation and assist in developing scripts, workflows, or tooling to improve operational efficiency.
• Maintain documentation, runbooks, and technical procedures related to endpoint security.
• Contribute to knowledge sharing and support operational excellence across the security team.

Note:

Responsibilities may evolve based on business and security requirements.

• 5–7+ years of experience in cybersecurity, with a strong focus on endpoint security or endpoint protection operations.
• Bachelor’s degree in a related field or equivalent professional experience.

• Hands-on experience with endpoint security platforms such as Crowd Strike or equivalent EDR solutions.
• Experience with endpoint firewall technologies and host-based security controls.
• Familiarity with cloud and SaaS security controls, including Azure AD and cloud environments.
• Strong understanding of operating systems (Windows, Linux, macOS) and enterprise IT environments (servers, networks, applications, databases, cloud).
• Working knowledge of basic network security concepts and threat detection principles.
• Experience with monitoring, alerting, and incident response related to endpoint threats.
• Strong analytical, troubleshooting, and problem-solving skills.
• Effective communication skills with the ability to work across technical and non-technical teams.

• Industry certifications such as CISSP or other relevant cybersecurity certifications.
• Experience with automation, scripting, or security tooling to improve endpoint operations.