Senior Lead Engineer, Cybersecurity, Endpoint Security

About the role

Design, engineer, integrate and continuously improve enterprise endpoint security capabilities across Windows, macOS, Linux, servers, virtual desktops and mobile devices. Partner with architecture, operations and vulnerability teams to translate Zero Trust and risk requirements into scalable solutions.

Key responsibilities

• Develop and maintain endpoint hardening standards, reference configurations and technical documentation.
• Lead security engineering for new platform migrations, major upgrades and proof‑of‑concept implementations.
• Perform endpoint security assessments, risk analyses and control‑effectiveness testing.
• Engineer telemetry, logging and integrations to support Security Operations and Incident Response.
• Provide advanced forensic expertise during investigations, including telemetry analysis and containment design.
• Automate security processes using PowerShell, Microsoft Graph and other platform APIs.
• Evaluate emerging endpoint security and AI‑enabled technologies and make adoption recommendations.

Required profile

• Minimum 6 years of enterprise endpoint security engineering experience.
• Hands‑on expertise with at least one major EDR/XDR platform (e.g., Microsoft Defender, CrowdStrike Falcon, SentinelOne).
• Experience with endpoint management solutions such as Microsoft Intune, Tanium or Jamf.
• Strong knowledge of securing Windows, macOS, Linux, server, virtual desktop and mobile environments.
• Proven ability to develop hardening baselines, encryption, application/device control and compliance programs.
• Experience scripting and automating security functions with PowerShell, APIs or similar tools.
• Familiarity with Zero Trust principles, NIST CSF, CIS Controls and relevant regulatory requirements.

Required skills

• Microsoft Defender for Endpoint / XDR
• CrowdStrike Falcon
• SentinelOne
• Microsoft Intune, Tanium, Jamf
• Windows, macOS, Linux operating systems
• PowerShell scripting
• Microsoft Graph API and other platform APIs
• Encryption, application control, attack‑surface reduction
• Security telemetry and logging
• Zero Trust architecture, NIST CSF, CIS Controls