Implement and operate endpoint security controls including EDR/XDR and MDM across Windows, Linux, and macOS environments. Maintain OS security baselines and collaborate with SOC and IT teams to remediate vulnerabilities and contain compromised devices.
We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, production servers, and critical infrastructure.
You will ensure reliable endpoint visibility, strong security baselines, effective telemetry collection, and containment capabilities across Windows, Linux, and macOS environments. You will work closely with IT, Cyber Defense, IAM, and Compliance teams to maintain measurable endpoint protection coverage and reduce security risks.
Responsibilities
Deploy, operate, and tune endpoint security controls (EDR/XDR, EPP, MDM) across corporate endpoints, servers, and critical infrastructure
Implement and maintain OS security baselines and hardening standards across Windows, Linux, and macOS environments based on CIS Benchmarks, DISA STIG, and internal policies
Support vulnerability remediation, patching activities, and endpoint security improvements in collaboration with IT and infrastructure teams
Configure and maintain endpoint protection capabilities, including file integrity monitoring and endpoint isolation readiness for critical systems
Support containment and response activities for compromised or non-compliant devices together with SOC and Cyber Defense teams
Assist with tracking endpoint security gaps, remediation actions, and configuration improvements
Document endpoint security configurations, operational procedures, and investigation findings
Requirements
3+ years of hands-on experience in Endpoint Security, Endpoint Protection, Infrastructure Security, System Security, or a similar cybersecurity role
Higher education in Computer Science, Information Security, Software Engineering, or a related technical field is preferred
Practical experience securing both desktop endpoints and server workloads in enterprise environments
Experience supporting environments with 1,000+ managed endpoints is highly preferred
Strong hands-on experience with EDR/XDR, Endpoint Protection Platforms (EPP), and Mobile Device Management (MDM) solutions
Deep understanding of Windows, Linux, and macOS architecture, services, processes, logging, and security mechanisms
Experience implementing OS hardening based on CIS Benchmarks, DISA STIG, or similar security standards
Knowledge of operating system access control models, RBAC, and least-privilege principles
Experience with native operating system security features such as Microsoft Defender, Attack Surface Reduction (ASR), BitLocker, SELinux, AppArmor, Gatekeeper, System Integrity Protection (SIP), and FileVault
Understanding of endpoint telemetry, file integrity monitoring, and endpoint isolation techniques
Scripting skills for automation using PowerShell and Python
English - Intermediate\Upper-Intermediate level
Ukrainian - Fluent
We offer
20 paid vacation days per year
10 paid sick leave days per year
Public holidays as per the company’s approved Public holiday list
Medical budget
Opportunity to work remotely
Professional education budget
Language learning budget
Wellness budget (gym membership, sports gear and related expenses)
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
