Endpoint Security Engineer, MS (AL-FNC260602 003/01)

We are seeking an experiencedEndpoint Security Engineerto oversee and strengthen enterprise endpoint security operations. This role is responsible for the administration, monitoring, optimization, and continuous enhancement of endpoint protection technologies, with a primary focus onMicrosoft Defender for Endpoint (MDE). The successful candidate will play a key role in safeguarding corporate endpoints against emerging cyber threats while collaborating closely with cybersecurity, infrastructure, and operations teams.

Key Responsibilities

Endpoint Security Administration

• Manage, administer, and supportMicrosoft Defender for Endpoint (MDE)across the organization.
• Configure, deploy, and maintain endpoint security controls, including anti-malware protection, intrusion prevention, firewall policies, and device control configurations.
• Monitor endpoint security posture and produce regular reports to identify security gaps, compliance issues, and areas for improvement.
• Oversee the complete lifecycle management of Microsoft Defender agents, including deployment, upgrades, maintenance, and retirement.
• Plan and execute MDE upgrades and agent rollouts during scheduled maintenance windows while ensuring minimal disruption to business operations.

Security Operations & Technical Support

• ProvideLevel 2 and Level 3operational support for endpoint security incidents, service requests, and technical issues.
• Monitor and investigate endpoint security alerts, security events, and potential threats.
• Conduct root cause analysis and implement corrective actions to mitigate recurring security issues.
• Collaborate with infrastructure and security teams to ensure endpoint protection remains effective and aligned with organizational policies.

IT Service Management

• Apply ITIL best practices acrossIncident Management,Problem Management, andChange Managementprocesses.
• Maintain accurate and detailed records of incidents, investigations, remediation actions, and service requests within the ticketing system.
• Ensure adherence to established Service Level Agreements (SLAs) and timely closure of assigned tickets.

Documentation & Knowledge Management

• Develop, review, and maintain technical documentation, standard operating procedures (SOPs), troubleshooting guides, and knowledge base articles.
• Create and update operational runbooks to support consistent execution of routine security and support activities.
• Share knowledge and best practices with internal teams to improve operational effectiveness.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.

• Minimumtwo years of professional experiencein IT, cybersecurity, or endpoint security operations.
• At leastone year of hands-on experience with Microsoft Defender for Endpoint (MDE).
• Experience managing or supportingHost Intrusion Prevention Systems (HIPS)andHost Intrusion Detection Systems (HIDS).
• Working knowledge ofWindows and/or Red Hat Linux system administration.
• Strong ability to manage multiple priorities in a fast-paced environment, with excellent communication, analytical, and interpersonal skills.
• Security clearance is required.

Preferred Qualifications

• Experience withSymantec Endpoint Protection Manager (SEPM)or similar endpoint protection platforms.
• Knowledge of automation and scripting using languages such asPowerShell,Python, or similar technologies.
• Familiarity with endpoint security best practices, threat detection methodologies, and security operations processes.
• Relevant cybersecurity certifications would be advantageous.