Junior Endpoint Security Analyst

Job Summary

ChargePoint is seeking a Junior Endpoint Security Analyst to own and advance our endpoint security programme. This is a hands-on security engineering role focused on protecting corporate assets through EDR, DLP, and insider threat detection and response. You will be responsible for the full lifecycle of endpoint security tooling: deployment, policy management, alert triage, threat hunting, and continuous improvement.

Reports To Director, Ai and Information Security

Responsibilities

• Support threat detection and response efforts by assisting in building detection logic, investigating alerts, and participating in incident response activities under the guidance of senior team members.
• Assist in managing the enterprise Data Loss Prevention (DLP) programme - help monitor DLP alerts, investigate potential policy violations, and coordinate with stakeholders on remediation steps.
• Support the day-to-day operations of the enterprise EDR platform, including assisting with deployment, policy configuration, and tuning across Windows, macOS, and Linux endpoints.
• Contribute to developing new detection use cases and monitoring strategies for endpoint-based threats, working with telemetry from EDR, DLP, UEBA, and other endpoint security tools.
• Triage and investigate endpoint security alerts, perform initial root cause analysis, and escalate complex incidents with recommended containment actions.
• Participate in proactive threat hunting exercises across endpoint telemetry to help identify advanced threats and attacker techniques.
• Collaborate with SOC, threat intelligence, and incident response teams to share endpoint findings and support broader security investigations.
• Stay current on emerging endpoint security technologies and contribute recommendations for improving the organizations security posture.
• Help develop and maintain runbooks, standard operating procedures, and documentation for endpoint security operations.
• Assist in producing metrics, dashboards, and reports on endpoint security posture and alert trends.
• Work alongside IT and infrastructure teams to support endpoint hardening and secure deployment practices.

Requirements

• 1+ year of experience in information security, including internships or relevant project work.
• Foundational hands-on experience with at least one enterprise EDR platform (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black).
• Basic understanding of DLP concepts and exposure to enterprise DLP solutions (e.g., Microsoft Purview, Symantec DLP).
• Awareness of insider threat detection concepts, including basic familiarity with UEBA tools and behavioural analytics.
• Ability to write or modify basic detection rules and understand correlation logic for endpoint-based threats.
• Understanding of endpoint fundamentals, OS internals (Windows, macOS, or Linux), and common attack surface reduction techniques.
• Familiarity with the MITRE ATTCK framework and how it applies to endpoint threat detection.
• Basic scripting skills in at least one language (Python, PowerShell, or Bash) with a willingness to build automation over time.
• Strong analytical and problem-solving skills with attention to detail and eagerness to learn in a fast-paced environment.
• Good written and verbal communication skills with the ability to document findings clearly.
• Bachelors degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.

Good to Have

• Exposure to SOAR platforms or security automation concepts.
• Basic understanding of Zero Trust architecture principles and their application to endpoint security.
• Any relevant certifications such as CompTIA Security+, CEH, or progress toward GCIH, GCFE, or similar.
• Familiarity with cloud environments (AWS, Azure, or GCP) and how endpoint security applies in cloud-first or hybrid setups.
• Awareness of user onboarding/offboarding processes and the security controls involved.
• Interest in or exposure to the EV, automotive, or critical infrastructure industry.

Location

Gurgaon/Remote

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.