Head of Endpoint Defense
Core
Leads Kyndryl's endpoint defense function, owning the operation, tuning, and coverage of the endpoint detection and response estate across Palo Alto Cortex XDR, Microsoft Defender for Endpoint, and Trend Micro.
Role type
Senior IC security operations leader (endpoint defense)
Builds
A platform service for Cyber Defense ensuring consistent prevention, detection, and telemetry quality across a heterogeneous, multi-vendor fleet.
Domain
Cybersecurity, Endpoint Security, SIEM/SOAR integration
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Endpoint security tool mastery (Cortex XDR, Microsoft Defender, Trend Micro), OS security mechanisms (Windows, Linux), Security architecture design (Zero Trust, segmentation), Incident response containment, Automation for security operations, KPI reporting
Preferred skills
Workload and server architecture knowledge, Security standards compliance (ISO 27001, NIST, GDPR)
Technologies
Palo Alto Cortex XDR, Microsoft Defender for Endpoint, Trend Micro, XSIAM, SIEM, SOAR
Responsibilities
Own operations, policy, and health for the endpoint defense estate; Drive agent coverage, deployment, and configuration integrity; Tune prevention and detection policy; Rationalize the multi-vendor endpoint stack; Ensure endpoint telemetry integration; Support incident response with containment and forensics; Drive automation for agent deployment and remediation; Lead and develop the endpoint defense team.
Seniority
Senior, hands-on IC with leadership responsibilities
