Endpoint Security Engineer

About us:

Intuitive.AI is one of the fastest-growing (INC 5000, CRN) Cloud & SDx solution and services companies supporting enterprise customers on a global scale. Intuitive is an Engineering Company delivering measurable value and key business outcomes.

Intuitive Superpowers:

- DataOps & AI/ML

- Cloud Native, AppSecOps, DevSecOps

- Cloud Migration & Transformation

- Cloud FinOps

- Cybersecurity (App/Data/Infra) & GRC

- SDx & Digital Workspace

We are proud to partner with some of the world's leading enterprises and serve 200+ customers across different industry verticals. We have achieved many milestones along the way, including being recognized as a top-10 fast-growth 150 IT company in the Americas by CRN in 2022 and being named one of America's fastest-growing private companies by INC 5000 in 2022. That's not all! Even CIO Review awarded us as the Most Promising Cloud Migration Company and Artificial Intelligence Solutions Provider in 2022.

About the job:

Title –Endpoint Security Engineer

Start date: Immediate

Position Type: Full Time

Location: Remote across India

Role Summary

We are looking for an experienced Endpoint Security Engineer with strong hands-on expertise in Microsoft Defender for Endpoint (MDE), Microsoft Defender XDR, and Microsoft Sentinel. The candidate will be responsible for designing, implementing, monitoring, and improving enterprise endpoint security and threat detection capabilities.

Key Responsibilities

• Design and implement Endpoint Security solutions across enterprise Windows environments.
• Administer and manage Microsoft Defender for Endpoint (MDE).
• Configure and manage Microsoft Defender XDR capabilities across Endpoint, Identity, Office 365, and Cloud Apps.
• Monitor and investigate security incidents, alerts, threats, and vulnerabilities.
• Integrate Microsoft Defender for Endpoint with Microsoft Sentinel for centralized SIEM/SOAR capabilities.
• Develop and tune Sentinel analytics rules, incidents, workbooks, and dashboards.
• Perform threat hunting using KQL (Kusto Query Language).
• Investigate endpoint compromises, malware, suspicious activities, and security incidents.
• Configure endpoint security policies, attack surface reduction rules, antivirus, EDR, firewall, and device control.
• Work with Microsoft Intune to implement endpoint security and compliance policies.
• Support XDR-based incident investigation and automated response.
• Perform vulnerability assessment, remediation, and endpoint hardening.
• Integrate Defender with Entra ID, Intune, Microsoft 365, and Sentinel.
• Participate in security incident response, RCA, containment, and remediation.
• Develop security dashboards and reports for security operations and management.
• Collaborate with SOC, Infrastructure, IAM, Cloud, and Compliance teams.

Mandatory Skills

• Endpoint Security – Strong hands-on experience
• Microsoft Defender for Endpoint – Strong hands-on experience
• Microsoft Defender XDR
• Microsoft Sentinel (SIEM)
• KQL
• Microsoft Intune
• Microsoft Entra ID
• Windows Endpoint Security
• Incident Response & Threat Hunting
• Vulnerability Management
• Security Policy & Endpoint Hardening

Good to Have

• Microsoft Defender for Office 365
• Microsoft Defender for Identity
• Microsoft Defender for Cloud
• Microsoft Purview
• PowerShell
• MITRE ATT&CK
• Zero Trust Security
• Automation / SOAR
• Microsoft security certifications such as SC-200, SC-300, SC-400, AZ-500