Senior Endpoint Security Engineer
Core
Lead next-generation endpoint threat modeling and security automation to shift from reactive patching to proactive, machine-speed defense using AI and telemetry.
Role type
Senior IC Endpoint Security Engineer (Threat Modeling & Automation)
Builds
Automated SOAR playbooks, virtual patching workflows, behavioral detection rules, and threat intelligence pipelines for Windows, macOS, Linux, and Cloud/OT fleets.
Domain
Cybersecurity, Endpoint Security, Threat Intelligence, AI/ML in Security
Deliverable
production ML models | product features
Required skills
SOAR orchestration, Python/PowerShell/Bash scripting, EDR/XDR telemetry parsing, MITRE ATT&CK mapping, CQL/Sigma/YARA rule authoring, CIS benchmark hardening, AI threat intelligence operationalization
Preferred skills
Generative AI tool integration, virtual patching implementation, automated drift remediation, cross-functional partnership with DevOps/SOC
Technologies
Falcon Fusion, Torq, XSOAR, CrowdStrike, Claude, Glasswing, ExPRT.ai, MITRE ATT&CK, CQL, Sigma, YARA, SPL
Responsibilities
Architect data-driven threat models and attack path diagrams; operationalize AI threat intelligence to prioritize vulnerabilities; design automated containment playbooks; enforce host-based isolation and ASR policies; build automated triage and enrichment pipelines for SOC analysts.
Seniority
Senior, hands-on IC
