Endpoint Protection Engineer

Main Purpose

As an Endpoint Protection Engineer, you will design, implement, and manage endpoint security solutions across corporate IT and Operational Technology (OT) environments. Working closely with Security, Infrastructure, and Workplace teams, you will strengthen endpoint protection, support cloud-native device management, and ensure compliance with security standards and best practices.

Key Responsibilities

Endpoint Security & Management

• Deploy, configure, and support endpoint security solutions, including EDR/XDR, Endpoint Protection, Mobile Threat Defense, DLP, and device compliance controls.
• Manage Windows, macOS, iOS, and Android endpoints using platforms such as Intune and Workspace ONE.
• Support cloud-native endpoint management and modern device provisioning.
• Maintain security baselines, patching, hardening, encryption, and vulnerability remediation.
• Integrate endpoint security platforms with enterprise services and automation tools.

Operations & Governance

• Monitor endpoint security posture and investigate security incidents.
• Perform threat exposure assessments and support remediation activities.
• Maintain endpoint standards, operational procedures, and compliance documentation.
• Support audits and compliance requirements aligned with ISO 27001, NIST, and CIS frameworks.

Collaboration & Continuous Improvement

• Collaborate with IT, Security, OT, and vendor teams to improve endpoint security capabilities.
• Provide technical guidance and share knowledge with colleagues and support teams.
• Contribute to automation, process improvements, and operational excellence initiatives.

Skills & Competencies

Essential

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 3+ years of experience managing endpoint security solutions across Windows, macOS, iOS, and Android.
• Hands-on experience with Microsoft Defender for Endpoint, Intune, Workspace ONE, Tanium, Cortex XDR/XSIAM, or similar technologies.
• Strong knowledge of endpoint security, compliance, hardening, encryption, patching, and vulnerability management.
• Experience with PowerShell and Microsoft Graph API.
• Working knowledge of CIS, NIST, and ISO 27001 frameworks.

Nice to Have

• Experience with Python, PowerShell, or Bash scripting.
• Knowledge of Microsoft 365 and Azure.
• Experience with ServiceNow integrations, DLP, Mobile Threat Defense, or Insider Risk solutions.
• Exposure to OT/industrial environments.
• Relevant certifications such as MD-102, SC-200, Tanium Certified Operator, or Palo Alto PCDRA.

Additional Skills

• Knowledge of ITIL/ITSM and Agile practices.
• Experience with Jira and Confluence.
• Strong communication, documentation, and stakeholder management skills.
• Analytical mindset with a focus on continuous improvement.
• Fluent written and spoken English.