Endpoint Security Engineer

This is a platform ownership role, responsible for maintaining endpoint security tool health, policy compliance, platform currency, and complete asset coverage rather than a purely monitoring-focused position.

Key Responsibilities

Endpoint Security – EDR / EPP

- Deploy, configure, and maintain EDR/EPP agents across servers and workstations.

- Administer endpoint security platforms such as Kaspersky Endpoint Security, Kaspersky EDR, CrowdStrike, and Microsoft Endpoint Protection.

- Manage Kaspersky Security Center (KSC/KSCA), including policy deployment, agent management, task scheduling, and reporting.

- Configure and tune endpoint security policies, including:

- Detection and prevention policies

- Application control

- Device control

- Web and mail filtering

- Monitor endpoint coverage and agent health, identifying unmanaged, inactive, or offline endpoints.

- Ensure endpoint security policies remain current and consistently applied across the environment.

- Coordinate with the SOC team on detection-rule tuning and false-positive reduction.

- Manage platform upgrades, patch cycles, version updates, and vendor escalations.

- Produce regular reports covering endpoint coverage, platform health, policy compliance, and security posture.

Platform Ownership & Operations

- Maintain SOPs, operational procedures, and runbooks for assigned cybersecurity platforms.

- Participate in formal change management processes, including submission, review, testing, and implementation of change requests.

- Coordinate with cybersecurity vendors for technical support, escalations, renewals, and product roadmap updates.

- Support incident response activities related to endpoint security platforms.

- Troubleshoot platform, agent, connectivity, and policy-related issues.

- Work with infrastructure, server, network, and SOC teams to maintain reliable endpoint security coverage.

Required Qualifications

- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.

- 3–5 years of experience in Cybersecurity Infrastructure, Endpoint Security, or a related technical security role.

- Strong hands-on experience with EDR and EPP technologies.

- Practical experience with Kaspersky Endpoint Security and Kaspersky EDR, preferably Expert or Optimum tiers.

- Hands-on experience managing Kaspersky Security Center (KSC/KSCA).

- Experience with policy deployment, endpoint agent management, health monitoring, and security reporting.

- Good administration knowledge of Windows Server and Linux environments.

- Good understanding of firewalls, proxies, network segmentation, and endpoint-security connectivity requirements.

- Strong troubleshooting, documentation, and technical problem-solving skills.

- Ability to work effectively with SOC, infrastructure, networking, and vendor teams.

Preferred Technical Experience

- Kaspersky Endpoint Security / Kaspersky EDR

- Kaspersky Security Center (KSC/KSCA)

- CrowdStrike

- Microsoft Endpoint Protection

- EDR/EPP Policy Management

- Windows & Linux Administration

- Endpoint Agent Deployment

- Security Policy Compliance

- Change Management

- Incident Response Support