Description

You will engineer and support endpoint and enterprise email security platforms, lead incident response, and drive security automation.

This role is on-site.

Responsibilities

• Engineer and maintain endpoint security solutions (CrowdStrike, Microsoft Defender, BitLocker) across Windows, macOS, and Linux.
• Support enterprise email security platforms, including Proofpoint and FireEye, managing threat response and DLP policies.
• Lead incident response for endpoint and email threats, conducting forensic analysis of phishing, malware, and BEC attacks.
• Develop automation scripts in PowerShell or Python to enhance telemetry analysis, threat hunting, and operational efficiency.
• Mentor junior engineers and collaborate with SOC and infrastructure teams to remediate vulnerabilities and align with security standards.

Required Skills

• 5+ years of Information Security Engineering experience.
• 2+ years of hands-on experience with EDR tools, specifically CrowdStrike and Microsoft Defender.
• Experience supporting enterprise email security platforms such as Proofpoint or FireEye.
• 2+ years of Windows Administration experience.
• 2+ years of experience with PowerShell or Python for automation and scripting.
• Proficiency with Splunk for log analysis and threat detection.
• Experience with SDLC and creating technical documentation.

Preferred Skills

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Certifications such as CISSP, GIAC, OSCP, or Microsoft Certified: Security Operations Analyst.
• Experience with REST APIs and Network Routing.

Key Skills

Education

Any Graduate