Lead Engineer – 2

Overview We are looking for a proactive and skilled Endpoint Security & Automation Engineer to join our cybersecurity team. The successful candidate will be responsible for designing and implementing automation solutions that ensure the health and effectiveness of endpoint security tools across the enterprise. This role blends scripting, tool engineering, and endpoint security expertise to reduce coverage gaps and increase operational efficiency Responsibilities - Design and develop automation scripts and integrations using Python or PowerShell to monitor the health of endpoint security tools and remediate coverage issues proactively. - Utilize REST APIs and JSON to automate, integrate, and enrich data across security tools for real-time monitoring and incident response. - Apply AI/ML models to use cases that support automated remediation of health and coverage issues in endpoint security tooling. - Engineer, implement, and operationalize various cybersecurity tools and platforms, ensuring seamless integration and organization-wide adoption. - Configure, integrate, and manage EDR/AV solutions such as CrowdStrike, Symantec Endpoint Protection (SEP), and Microsoft Defender for Endpoint to improve visibility and response capabilities. - Leverage Tanium Interact, actions, and custom packaging capabilities for real-time endpoint management and orchestration. - Utilize asset discovery & Inventory tools for asset visibility and automation within the broader cybersecurity ecosystem. - Demonstrate strong understanding of Windows and Linux internals, Active Directory, Intune, and network security principles to support endpoint protection strategies. Qualifications - 8 or more years of experience in the design and implementation of Endpoint Security products such as CrowdStrike, Symantec Endpoint Protection (SEP), and Microsoft Defender for Endpoint - Demonstrated effectiveness working across multiple business units to achieve results - Significant technical expertise in two or more of the following areas - Cloud Security - Endpoint security - Data Security - SIEM - 8 or more years of experience in the design and implementation of Endpoint Security products such as CrowdStrike, Symantec Endpoint Protection (SEP), and Microsoft Defender for Endpoint - Demonstrated effectiveness working across multiple business units to achieve results - Significant technical expertise in two or more of the following areas - Cloud Security - Endpoint security - Data Security - SIEM - Design and develop automation scripts and integrations using Python or PowerShell to monitor the health of endpoint security tools and remediate coverage issues proactively. - Utilize REST APIs and JSON to automate, integrate, and enrich data across security tools for real-time monitoring and incident response. - Apply AI/ML models to use cases that support automated remediation of health and coverage issues in endpoint security tooling. - Engineer, implement, and operationalize various cybersecurity tools and platforms, ensuring seamless integration and organization-wide adoption. - Configure, integrate, and manage EDR/AV solutions such as CrowdStrike, Symantec Endpoint Protection (SEP), and Microsoft Defender for Endpoint to improve visibility and response capabilities. - Leverage Tanium Interact, actions, and custom packaging capabilities for real-time endpoint management and orchestration. - Utilize asset discovery & Inventory tools for asset visibility and automation within the broader cybersecurity ecosystem. - Demonstrate strong understanding of Windows and Linux internals, Active Directory, Intune, and network security principles to support endpoint protection strategies.