Endpoint Security Engineer III

Application close date:

Applications will be accepted on an ongoing basis until the requisition is closed. At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We're working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! This role is part of Enterprise Technology (ET), where we're developing the digital infrastructure needed to build the road to space, with an emphasis on digital capabilities required to advance Blue Origin's mission. Enterprise Technology is the center of excellence for digital technology at Blue Origin, providing oversight and governance to align technology and business strategies. As part of a small, accomplished team of experts, you will protect and secure the endpoints that Blue Origin's engineers, technicians, and business teams depend on every day. You will share in the team's impact on all aspects of endpoint security, and you will lead and assist with many aspects of operations and engineering on the Endpoint Experience team. Security engineers evaluate, select, procure, implement, and operate security technology supporting enterprise and space systems. This role is the technical lead for our AV and EDR stack - Microsoft Defender for Endpoint and Tanium - and it is deliberately operating-system agnostic. You will be expected to reason about detection coverage, agent health, and security posture with equal fluency across all systems . We are looking for someone to apply their technical expertise, leadership skills, and commitment to quality to positively impact safe human spaceflight. Passion for our mission and vision is required.

Responsibilities

Microsoft Defender for Endpoint

• Own endpoint detection and response coverage across the fleet: onboarding and offboarding, agent lifecycle, platform build currency, and tamper protection, on Windows, macOS, and Linux.
• Monitor and remediate sensor health, and continuously reconcile Defender coverage against authoritative inventory so that unmonitored endpoints are found and fixed rather than discovered during an incident.
• Manage antivirus and protection policy - scan behavior, definition currency, at tack surface reduction rules, exclusions, and platform-specific configuration - balancing security outcome against engineering workload impact.
• Write and maintain advanced hunting queries to answer posture and exposure questions, and understand the limits of what endpoint telemetry can and cannot show.
• Operate diagnostic tooling (client analyzers and equivalent) and drive vendor cases to resolution when platform defects affect the fleet.
• Act on security recommendations and vulnerability findings surfaced by the platform, prioritizing by real exposure rather than raw score.

Tanium

• Own the architecture, configuration, and operation of the enterprise endpoint management and security platform, ... For full info follow application link.ITAR RequirementsTo conform to U.S. Government commercial space technology export regulations, including the International Traffic in Arms Regulations (ITAR), 8 U.S.C. § 1324b(a)(3), applicants for employment at Blue Origin must be a U.S. citizen or national, lawfully admitted for permanent residence into the U.S. (i.e. current green card holder), or lawfully admitted as a refugee or granted asylum under 8 U.S.C. § 1157-1158. Learn more about the ITAR here. Equal Employment OpportunityBlue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified, diverse, and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork, in which all employees recognize and appreciate the diversity of individual team members. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, gender, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws. For more information on “EEO Is the Law,” please see here and here.Affirmative Action and Disability AccommodationApplicants wishing to view a copy of Blue Origin’s Affirmative Action Plans, or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process, please contact us at EEOCompliance@blueorigin.com.