01Overview
Role Description
Senior Endpoint Security Engineer (SentinelOne EDR & CyberArk PAM) Job Summary
We are seeking an experienced Senior Endpoint Security Engineer with 8-10+ years of experience in Information/Cyber Security to support enterprise-scale security operations within a SOC/MSS workplace. The role focuses on endpoint protection, privileged access management, email security, incident response, threat hunting, and security platform optimization. The successful candidate will collaborate with SOC, Infrastructure, Identity, Cloud, and Application Security teams to strengthen the organization's security posture and operational effectiveness.
Key Responsibilities
Provide L2+ operational support for enterprise endpoint security platforms with a focus on SentinelOne EDR, Palo Alto Cortex XDR, and CyberArk PAM.
Administer, manage, and optimize SentinelOne EDR deployments, agent lifecycle management, policy tuning, exclusions, threat hunting, rollout activities, and forensic investigations.
Support Palo Alto Cortex XDR operations including incident investigation, behavioral analytics, malware detection, IOC management, and response actions.
Investigate and respond to malware, ransomware, phishing attempts, insider threats, and suspicious endpoint activities.
Perform root cause analysis and coordinate containment, eradication, and recovery activities for security incidents.
Administer CyberArk PAM components including PVWA, CPM, and PSM, account onboarding, password vaulting, password rotation, privileged session management, and troubleshooting.
Manage and support Microsoft Defender for Office 365 and Exchange Online Protection for anti-phishing, anti-spam, and email security operations.
Conduct proactive threat hunting using endpoint telemetry, IOC searches, and security analytics.
Support endpoint hardening initiatives including BitLocker, device control, application control, and vulnerability remediation.
Manage operating system security across Windows and Linu .
