Sr Subject Matter Expert (Support&Ops)

Job Summary

Endpoint Security Engineer (AV & EDR)

the L3 Endpoint Security Engineer serves as the technical Subject Matter Expert (SME) for Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. This role is responsible for solution architecture, advanced threat investigations, platform optimization, governance, and escalation support for complex security incidents and infrastructure issues. The position provides technical leadership to L1/L2 teams and drives continuous improvement of endpoint security services. \\r\\n\\r\\n \\r\\n\\r\\nKey Responsibilities: \\r\\n\\r\\nMust have 8+ years of experience in Endpoint Security and Implementation (MS Defender, SentinelOne, Crowdstrike..) \\r\\n\\r\\n \\r\\n\\r\\nAct as the Subject Matter Expert (SME) for enterprise Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. \\r\\n\\r\\nDesign, implement, administer, and optimize endpoint security solutions across enterprise environments. \\r\\n\\r\\nLead deployment, migration, upgrade, and integration projects for endpoint security technologies. \\r\\n\\r\\nDefine and maintain endpoint security baselines, standards, policies, and governance controls for AV, EDR, Firewall, ASR, Device Control, and Web Protection \\r\\n\\r\\nLead investigation and resolution of critical security incidents, malware outbreaks, ransomware attacks, and advanced threats. \\r\\n\\r\\nPerform advanced threat hunting, malware analysis, forensic investigations, and root cause analysis activities. \\r\\n\\r\\nDevelop and implement containment, remediation, recovery, and detection enhancement strategies to improve security posture. \\r\\n\\r\\nReview and optimize security policies, exclusions, detections, alerts, and response workflows to improve protection effectiveness and reduce false positives. \\r\\n\\r\\nAct as the highest technical escalation point for complex endpoint security, agent health, onboarding, telemetry, policy, and integration-related issues. \\r\\n\\r\\nDesign and support integrations with Microsoft Intune, Active Directory, Entra ID, SIEM platforms, Microsoft Sentinel, Splunk, and SOC monitoring solutions \\r\\n\\r\\nDrive continuous service improvement initiatives through platform tuning, automation, orchestration, and operational process optimization. \\r\\n\\r\\nConduct Proof of Concepts (POCs), evaluate emerging endpoint security technologies, and provide strategic recommendations for future security enhancements. \\r\\n\\r\\nCollaborate with SOC, Infrastructure, Cloud, and Endpoint Management teams to strengthen detection, response, and security operations capabilities. \\r\\n\\r\\nDevelop and maintain technical documentation, architecture diagrams, SOPs, runbooks, standards, and knowledge base articles. \\r\\n\\r\\nProvide technical leadership, mentoring, training, and knowledge transfer to L1 and L2 engineers. \\r\\n\\r\\nPrepare executive reports, security posture assessments, compliance reports, risk analyses, and strategic recommendations for stakeholders and management. \\r\\n\\r\\nSupport audit, compliance, and governance activities while ensuring adherence to organizational security requirements and best practices. \\r\\n\\r\\n

Key Responsibilities

the L3 Endpoint Security Engineer serves as the technical Subject Matter Expert (SME) for Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. This role is responsible for solution architecture, advanced threat investigations, platform optimization, governance, and escalation support for complex security incidents and infrastructure issues. The position provides technical leadership to L1/L2 teams and drives continuous improvement of endpoint security services. \\r\\n\\r\\n \\r\\n\\r\\nKey Responsibilities: \\r\\n\\r\\nMust have 8+ years of experience in Endpoint Security and Implementation (MS Defender, SentinelOne, Crowdstrike..) \\r\\n\\r\\n \\r\\n\\r\\nAct as the Subject Matter Expert (SME) for enterprise Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. \\r\\n\\r\\nDesign, implement, administer, and optimize endpoint security solutions across enterprise environments. \\r\\n\\r\\nLead deployment, migration, upgrade, and integration projects for endpoint security technologies. \\r\\n\\r\\nDefine and maintain endpoint security baselines, standards, policies, and governance controls for AV, EDR, Firewall, ASR, Device Control, and Web Protection \\r\\n\\r\\nLead investigation and resolution of critical security incidents, malware outbreaks, ransomware attacks, and advanced threats. \\r\\n\\r\\nPerform advanced threat hunting, malware analysis, forensic investigations, and root cause analysis activities. \\r\\n\\r\\nDevelop and implement containment, remediation, recovery, and detection enhancement strategies to improve security posture. \\r\\n\\r\\nReview and optimize security policies, exclusions, detections, alerts, and response workflows to improve protection effectiveness and reduce false positives. \\r\\n\\r\\nAct as the highest technical escalation point for complex endpoint security, agent health, onboarding, telemetry, policy, and integration-related issues. \\r\\n\\r\\nDesign and support integrations with Microsoft Intune, Active Directory, Entra ID, SIEM platforms, Microsoft Sentinel, Splunk, and SOC monitoring solutions \\r\\n\\r\\nDrive continuous service improvement initiatives through platform tuning, automation, orchestration, and operational process optimization. \\r\\n\\r\\nConduct Proof of Concepts (POCs), evaluate emerging endpoint security technologies, and provide strategic recommendations for future security enhancements. \\r\\n\\r\\nCollaborate with SOC, Infrastructure, Cloud, and Endpoint Management teams to strengthen detection, response, and security operations capabilities. \\r\\n\\r\\nDevelop and maintain technical documentation, architecture diagrams, SOPs, runbooks, standards, and knowledge base articles. \\r\\n\\r\\nProvide technical leadership, mentoring, training, and knowledge transfer to L1 and L2 engineers. \\r\\n\\r\\nPrepare executive reports, security posture assessments, compliance reports, risk analyses, and strategic recommendations for stakeholders and management. \\r\\n\\r\\nSupport audit, compliance, and governance activities while ensuring adherence to organizational security requirements and best practices. \\r\\n\\r\\n

Skill Requirements

Develop and maintain technical documentation, architecture diagrams, SOPs, runbooks, standards, and knowledge base articles. \\r\\n\\r\\nProvide technical leadership, mentoring, training, and knowledge transfer to L1 and L2 engineers. \\r\\n\\r\\nPrepare executive reports, security posture assessments, compliance reports, risk analyses, and strategic recommendations for stakeholders and management. \\r\\n\\r\\nSupport audit, compliance, and governance activities while ensuring adherence to organizational security requirements and best practices.

Other Requirements