Endpoint Security Engineer III
Core
Technical lead for AV and EDR stack (Microsoft Defender for Endpoint and Tanium) protecting enterprise endpoints across Windows, macOS, and Linux.
Role type
Senior IC Endpoint Security Engineer
Builds
Enterprise endpoint detection, response, and management platform
Domain
Cybersecurity / Endpoint Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Endpoint security operations, Microsoft Defender for Endpoint, Tanium, multi-platform administration (Windows/macOS/Linux), scripting automation (PowerShell/Python/Bash), security posture reporting, compliance mapping (NIST/ISO), incident response, platform migration
Preferred skills
CISSP, GIAC, CISM, CISA, Security+, FedRAMP experience
Technologies
Microsoft Defender for Endpoint, Tanium, Active Directory, Entra ID, PowerShell, Python, Bash
Responsibilities
Own endpoint detection and response coverage across the fleet including onboarding, offboarding, and agent lifecycle management; Monitor and remediate sensor health and reconcile Defender coverage against authoritative inventory; Manage antivirus and protection policy including scan behavior and attack surface reduction rules; Write and maintain advanced hunting queries to answer posture and exposure questions; Operate diagnostic tooling and drive vendor cases to resolution; Own the architecture, configuration, and operation of the enterprise endpoint management and security platform; Author and maintain platform content including sensors, packages, and saved questions; Design and maintain the role-based access model scoped to least privilege; Instrument the fleet to report security posture against recognized benchmarks (CIS, DISA STIG) and evidence control implementation for compliance obligations; Work with engineering groups to provide endpoint security requirements for new applications and systems; Contribute to the endpoint security roadmap and best practices at the department level; Mentor other team members on security technologies and standards; Review the work of other team members and be accountable for technical analysis within the discipline.
Seniority
Senior, hands-on IC with technical leadership