Endpoint & Threat Management - Security Engineer

Key Responsibilities

• Assess, design, and optimize

  endpoint security processes

  leveraging Microsoft Defender and related technologies.
• Implement

  automation frameworks

  to streamline security operations and improve detection and response times.
• Conduct threat analysis and investigations, working with SIEM platforms to identify, contain, and remediate incidents.
• Collaborate with cross-functional IT and security teams to ensure endpoint security controls are aligned with organizational standards and compliance requirements.
• Design and implement

  micro-segmentation strategies

  to limit lateral movement and reduce attack surface.
• Regularly review and improve existing

  security playbooks

  , runbooks, and response workflows.
• Stay updated on emerging threats, vulnerabilities, and best practices to proactively improve the organizations security posture.

Required Skills & Experience

• Strong hands-on expertise with

  Microsoft Defender

  (Endpoint, Identity, and related modules).
• Good understanding of cybersecurity fundamentals including endpoint, network, identity, and access security.
• Experience in

  process assessment and optimization

  for endpoint security.
• Proven track record of implementing

  automation

  in security operations (e.g., PowerShell, Python, Logic Apps, SOAR platforms).
• Working knowledge of

  SIEM tools

  (Microsoft Sentinel or equivalent) for threat monitoring and incident response.
• Familiarity with

  micro-segmentation

  solutions (e.g., ColorTokens, Illumio, or equivalent) is a strong plus.
• Knowledge of

  threat hunting and threat intelligence practices

  .
• Strong problem-solving, analytical, and communication skills.

Preferred Qualifications

• Bachelors degree in Computer Science, Information Security, or related field (or equivalent experience).
• Relevant industry certifications such as

  Microsoft Certified: Security Operations Analyst Associate

  ,

  SC-200

  ,

  CISSP

  , or

  GIAC

  preferred.
• Experience in large enterprise or managed security environments.