Role : Endpoint Security Engineer

Summary

We are seeking an Endpoint Security Engineer to support the design, implementation, and optimization of Cloudstrike or Palo alto or Microsoft security technologies that protect enterprise endpoint and email environments.

This role focuses on engineering, configuration, and continuous improvement of Microsoft Defender or any EDR/XDR for Endpoint to strengthen the organizations cybersecurity posture.

The ideal candidate will have hands-on experience implementing security controls, tuning detection capabilities, and partnering with security operations teams to improve threat detection and response.

Key Responsibilities

Cloud-First Endpoint Security Expertise :

Hands-on experience deploying and managing CrowdStrike Falcon, SentinelOne, or comparable XDR platforms within cloud environments.
End-to-End Platform Ownership : Proven responsibility for architecture, implementation, integration, daily operations, troubleshooting, upgrades, and ongoing lifecycle support.
Engineer and tune policies to detect and prevent phishing, business email compromise (BEC), and malicious attachments.
Cloud and Endpoint Ecosystem : Strong experience with AWS, GCP and Azure endpoint-management technologies such as Microsoft Intune, JAMF, SCCM/MECM, or equivalent platforms.
Platform Engineering : Hands-on expertise with agent deployment, policy configuration, version upgrades, performance tuning, exclusion management, troubleshooting, health monitoring, and platform migrations.
Configure and optimize email authentication and protection controls such as SPF, DKIM, and DMARC.
Partner with Security Operations teams to improve detection rules and remediation workflows.
Support attack simulation training campaigns and security awareness initiatives.

Microsoft Defender For Endpoint (Endpoint Security Engineering)

Deploy and configure Microsoft Defender for Endpoint capabilities across enterprise endpoints.
Implement and manage endpoint security features including :
Endpoint Detection & Response (EDR)
Attack Surface Reduction (ASR) rules
Web and network protection
Device control policies
Endpoint vulnerability management
Engineer and maintain endpoint security baselines and hardening standards.
Tune detection rules and alerts to reduce noise while maintaining strong threat coverage.
Assist with investigation and remediation of endpoint security incidents when needed.

Platform Engineering & Security Integration

Support automation and response workflows using PowerShell and Microsoft security APIs.
Maintain documentation for configurations, engineering standards, and operational procedures.
Collaborate with infrastructure, cloud, and identity teams to implement Zero Trust security controls.

Required Qualifications

Bachelors degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience).
7 to 10 years of cybersecurity or security engineering experience.
Hands-on experience with :
Microsoft Defender for Endpoint
Microsoft 365 Security & Compliance Center
Holding an end-to-end implementation experience with endpoint security and EDR/XDR platforms.
Experience with endpoint management tools such as Intune, JAMF or SCCM.

Preferred Qualifications

Microsoft security certifications (CH, SC-200, SC-300, MS-500, or similar).
CrowdStrike Certified Falcon Administrator (CCFA).
Experience integrating Cloudstrike, EDR/XDR tools, Microsoft Defender and SentinelOne.
Experience with security automation using PowerShell/any other scripting languages.
Knowledge of Zero Trust security architecture.
Familiarity with vulnerability management tools and processes.

Key Competencies

Strong technical problem-solving skills with security mindset.
Ability to design and improve security configurations to strengthen the endpoint security.
Detail-oriented with strong documentation practices.
Effective collaboration with security operations and infrastructure teams.
Ability to balance security with operational usability.

(ref:hirist.tech)