The Endpoint Security Engineer will be responsible for designing, implementing, and maintaining endpoint security solutions to protect our organizations sensitive data and assets. This role involves working closely with IT, network security, and other departments to ensure comprehensive endpoint security across all devices.
What You Can Expect
- Work with Security service providers to monitor and track remediation activities to address weaknesses and issues discovered through daily/weekly reviews
- Fine tuning, configuration, administration, and management of the endpoint security platforms/solutions
- Work with Threat, Detect and Response (SOC) teams to improve effectiveness in incident management.
- Develop strategies to measure and ensure compliance with endpoint security standards.
- Provide training and guidance to end-users and IT staff on endpoint security best practices.
- Conduct regular security audits and compliance checks on endpoint devices.
- Develop / maintain documentation - such as operational procedures, RCA and reports related to management/security/audit requirements.
- Drive and measure optimal health and performance monitoring of endpoint security agents and sensors.
- Work with IT endpoint teams to manage Add/removes/Changes and troubleshoot issues related to endpoint security tools.
- Provide regular reporting including assessment findings and recommendations for improvement.
What we're Looking For
- Minimum 5+ years of proven experience with managing endpoint protection platforms
- Strong knowledge and experience in security technologies such as EDR, DLP, and EPM.
- Direct experience in supporting Crowdstrike Falcon Platform
- Experience with Digital Guardian, and BeyondTrust EPM is highly desired.
- Scripting skills, Python, PowerShell, Bash, Perl, Jscript and knowledge of regular expressions.
- Experience with endpoint management tools such as MS EMM (Intune, SCCM), BigFix is a plus
- Experience with administrating diverse set of physical and virtual platforms, MS Windows, Linux and macOS is highly desired.
- Experience with performance monitoring solutions like 1e and Nexthink is significant plus
- Strong understanding of next-gen and traditional endpoint protection strategies and technologies.
- Understand and be able to maintain, test, and troubleshoot endpoint protection policies and rules
- Experience in using various tools like SIEM, and SOAR is a plus
- Familiarity with relevant security standards, such as NIST800-171 and ISO27001
- Strong analytical and problem-solving abilities, with attention to detail.
- Ability to prioritize, drive others to action, delivery results, mentor and develop technical skills in team.
- Excellent communication and collaboration skills, with the ability to work effectively in a team environment.
- Ability to work independently and prioritize tasks in a fast-paced, dynamic environment.
- Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related field; Masters degree preferred.
- Relevant cybersecurity certifications such as CISSP, GIAC, or equivalent
