The final salary or hourly wage, as applicable, paid to each candidate/applicant for this position is ultimately dependent on a variety of factors, including, but not limited to, the candidate’s/applicant’s qualifications, skills, and level of experience as well as the geographical location of the position.
Applicants must be legally authorized to work in the United States. Sponsorship not available.
Our client is seeking Endpoint Security Engineer in for a remote opportunity.
ROLE DESCRIPTION
Seeking an experienced cybersecurity engineer to support enterprise Application Whitelisting/Application Control and daily endpoint security operations. The resource should have strong hands-on experience with Microsoft WDAC/App Control for Business, AppLocker, or other enterprise application whitelisting/application control technologies. Experience with ThreatLocker and/or Airlock Digital is highly desirable given upcoming proof-of-concept efforts.
SKILLS & REQUIREMENTS
- 10+ years experience preferred but open to less for a level 2
- Strong Application Whitelisting / Application Control experience
- Hands-on with WDAC / App Control for Business and/or AppLocker
- Strong Microsoft Defender for Endpoint + Defender Antivirus
- KQL / Defender Advanced Hunting experience
- Endpoint security policy management with Intune and/or MECM/SCCM
- Strong Windows endpoint troubleshooting and event-log analysis
- Knowledge of code signing, certificates, hashes & trusted publishers
- Scripting/automation with PowerShell and/or Ansible
- Experience across workstations, servers & VDI
- Working knowledge of Windows, macOS & Linux/RHEL
- Strong endpoint security / EDR / malware prevention background
- ThreatLocker and/or Airlock Digital highly preferred
- GitHub/source-control experience preferred
- Design, implement, tune, and troubleshoot application whitelisting/application control policies across enterprise environments.
- Experience with WDAC/App Control for Business, AppLocker, ThreatLocker, Airlock Digital, or comparable application control platforms.
- Troubleshoot application execution blocks using endpoint telemetry, Windows event logs, application control events, and other diagnostic data.
- Strong experience with Microsoft Defender for Endpoint and Defender Antivirus, including endpoint health, compliance monitoring, policy troubleshooting, AV/EDR exclusions, and remediation.
- Experience supporting day-to-day Defender operations, including investigating security alerts, endpoint health issues, sensor/telemetry issues, malware detections, and protection-status discrepancies.
- Experience troubleshooting Defender Antivirus and EDR behavior, including performance-related issues, policy conflicts, exclusions, scanning behavior, and endpoint onboarding or configuration issues.
- Working knowledge of Defender security capabilities such as attack surface reduction, Controlled Folder Access, tamper protection, automated investigation/remediation, and endpoint detection and response.
- Experience with KQL and Microsoft Defender Advanced Hunting for endpoint investigation, troubleshooting, compliance analysis, threat hunting, and validation.
- Experience managing endpoint security policies through Microsoft Intune and MECM/SCCM, including deployment, targeting, testing, validation, and troubleshooting.
- Working knowledge across Windows, macOS, and Linux, particularly Red Hat Enterprise Linux (RHEL) environments.
- Knowledge of code signing, certificates, trusted publishers/signers, hashes, paths, and application trust models.
- Experience with GitHub or similar source-control platforms for maintaining application control policies, scripts, documentation, versioning, and change history.
- Experience with Ansible, PowerShell, and other scripting or automation technologies is highly desirable.
- Experience supporting application control and endpoint security across workstations, servers, and VDI environments.
- Strong understanding of cybersecurity fundamentals, including endpoint security, malware prevention, vulnerability management, least privilege, defense-in-depth, threat detection, and security control validation.
- Ability to analyze security events and endpoint telemetry to distinguish malicious or suspicious activity from legitimate application and system behavior.
Benefits/Other Compensation
Medical, Dental, Life Insurance, 401K.
Why Hays?
You will be working with a professional recruiter who has intimate knowledge of the industry and market trends. Your Hays recruiter will lead you through a thorough screening process in order to understand your skills, experience, needs, and drivers. You will also get support on resume writing, interview tips, and career planning, so when there’s a position you really want, you’re fully prepared to get it.
Nervous about an upcoming interview? Unsure how to write a new resume?
Visit the Hays Career Advice section to learn top tips to help you stand out from the crowd when job hunting.
Hays is committed to building a thriving culture of diversity that embraces people with different backgrounds, perspectives, and experiences. We believe that the more inclusive we are, the better we serve our candidates, clients, and employees. We are an equal employment opportunity employer, and we comply with all applicable laws prohibiting discrimination based on race, color, creed, sex (including pregnancy, sexual orientation, or gender identity), age, national origin or ancestry, physical or mental disability, veteran status, marital status, genetic information, HIV-positive status, as well as any other characteristic protected by federal, state, or local law. One of Hays’ guiding principles is ‘do the right thing’. We also believe that actions speak louder than words. In that regard, we train our staff on ensuring inclusivity throughout the entire recruitment process and counsel our clients on these principles. If you have any questions about Hays or any of our processes, please contact us.
In accordance with applicable federal, state, and local law protecting qualified individuals with known disabilities, Hays will attempt to reasonably accommodate those individuals unless doing so would create an undue hardship on the company. Any qualified applicant or consultant with a disability who requires an accommodation in order to perform the essential functions of the job should call or text 813.336.5570.
Drug testing may be required; please contact a recruiter for more information.
#1187415 - Kellee Jacobsen
