We are seeking an experienced Endpoint Security Engineer to oversee and strengthen enterprise endpoint security operations. This role is responsible for the administration, monitoring, optimization, and continuous enhancement of endpoint protection technologies, with a primary focus on Microsoft Defender for Endpoint (MDE). The successful candidate will play a key role in safeguarding corporate endpoints against emerging cyber threats while collaborating closely with cybersecurity, infrastructure, and operations teams.
Key Responsibilities
Endpoint Security Administration
- Manage, administer, and support Microsoft Defender for Endpoint (MDE) across the organization.
- Configure, deploy, and maintain endpoint security controls, including anti-malware protection, intrusion prevention, firewall policies, and device control configurations.
- Monitor endpoint security posture and produce regular reports to identify security gaps, compliance issues, and areas for improvement.
- Oversee the complete lifecycle management of Microsoft Defender agents, including deployment, upgrades, maintenance, and retirement.
- Plan and execute MDE upgrades and agent rollouts during scheduled maintenance windows while ensuring minimal disruption to business operations.
Security Operations & Technical Support
- Provide Level 2 and Level 3 operational support for endpoint security incidents, service requests, and technical issues.
- Monitor and investigate endpoint security alerts, security events, and potential threats.
- Conduct root cause analysis and implement corrective actions to mitigate recurring security issues.
- Collaborate with infrastructure and security teams to ensure endpoint protection remains effective and aligned with organizational policies.
IT Service Management
- Apply ITIL best practices across Incident Management, Problem Management, and Change Management processes.
- Maintain accurate and detailed records of incidents, investigations, remediation actions, and service requests within the ticketing system.
- Ensure adherence to established Service Level Agreements (SLAs) and timely closure of assigned tickets.
Documentation & Knowledge Management
- Develop, review, and maintain technical documentation, standard operating procedures (SOPs), troubleshooting guides, and knowledge base articles.
- Create and update operational runbooks to support consistent execution of routine security and support activities.
- Share knowledge and best practices with internal teams to improve operational effectiveness.
Requirements
- Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.
- Minimum two years of professional experience in IT, cybersecurity, or endpoint security operations.
- At least one year of hands-on experience with Microsoft Defender for Endpoint (MDE).
- Experience managing or supporting Host Intrusion Prevention Systems (HIPS) and Host Intrusion Detection Systems (HIDS).
- Working knowledge of Windows and/or Red Hat Linux system administration.
- Strong ability to manage multiple priorities in a fast-paced environment, with excellent communication, analytical, and interpersonal skills.
- Security clearance is required.
Preferred Qualifications
- Experience with Symantec Endpoint Protection Manager (SEPM) or similar endpoint protection platforms.
- Knowledge of automation and scripting using languages such as PowerShell, Python, or similar technologies.
- Familiarity with endpoint security best practices, threat detection methodologies, and security operations processes.
- Relevant cybersecurity certifications would be advantageous.