Cyber Defense Engineering II - Endpoint Protection
Core
Manage enterprise-wide endpoint security agents (AV/EDR) across Windows, Linux, and macOS, ensuring 100% deployment, visibility, and compliance while troubleshooting health issues and handling Tier 1/2 incidents.
Role type
Mid-level IC endpoint security engineer
Builds
Enterprise AV/EDR control deployments and migrations
Domain
Cybersecurity / Endpoint Protection
Required skills
Windows/Linux/macOS OS internals, command-line usage, log analysis, scripting (PowerShell/Bash/Python), TCP/IP and DNS fundamentals, AV/EDR policy configuration, ticket management
Preferred skills
SIEM query languages (SPL/KQL/CQL), API usage for automation, enterprise platform experience
Technologies
Windows, Linux, macOS, PowerShell, Bash, Python, AV/EDR platforms, SIEM
Responsibilities
Deploy, update, and troubleshoot endpoint security agents; manage AV/EDR policy configurations and exclusions; monitor agent health and resolve non-compliance incidents; handle Tier 1/2 operational support tickets; assist in enterprise-wide platform migrations; maintain internal documentation and SOPs
Seniority
Mid-level, hands-on IC
