Security Engineer (TrendMicro, CrowdStrike EDR and Tenable)

Paramount Computer System; Dubai; On-site; AED 240,000 - 320,000; Full time

Job summary

Keka Inc. in Dubai seeks a Security Engineer focused on TrendMicro, CrowdStrike EDR and Tenable to join our security operations.

The role requires hands-on incident response, platform administration, and policy enforcement across global endpoints. You will design and test strict security policies, hunt threats, analyze malware, perform root-cause analysis, and coordinate with vendor support to resolve complex issues.

Qualifications

• 5+ years in IT security operations with at least 3 years in EDR/endpoint security.
• Certifications such as CISSP, CEH, GCIH or vendor-specific EDR certs.
• Strong knowledge of Windows, Linux, macOS, Active Directory, and cloud environments.

Responsibilities

• Investigate high-severity alerts and lead containment actions for advanced breaches.
• Manage, tune, and maintain enterprise EDR and endpoint protection agents (Trend Micro DSM, Symantec EPP, CrowdStrike EDR).
• Design, test, and deploy strict security policies across global endpoints.
• Proactively search telemetry for IoCs and conduct malware analysis.
• Perform deep-dive forensic analysis and write post-incident reports.
• Coordinate with tier-4 vendor support to resolve platform issues.

Skills

Incident Response

Threat Hunting

Malware Analysis

Root Cause Analysis

Vendor Escalation

Policy Management

Endpoint Protection

EDR

Platform Administration

Education

CISSP

CEH

GCIH

EDR Certifications

Tools

Trend Micro DSM

Symantec EPP

CrowdStrike EDR

Tenable

Qualys

Rapid7

Job description

Security Engineer (TrendMicro, CrowdStrike EDR and Tenable)

5 Years

DXB

Full-Time

An L2 Engineer for Endpoint Protection and EDR (Endpoint Detection and Response) manages advanced security incidents, configures high-level security tools, and resolves complex endpoint threats.

Core Responsibilities (Primary Skill: Endpoint Protection & EDR)

• Incident Response: Investigate high-severity alerts and lead containment actions for advanced security breaches.
• Platform Administration: Manage, tune, and maintain enterprise EDR and endpoint protection agents (such as TrendMicro DSM, Symantec EPP, CrowdStrike EDR)
• Policy Management: Design, test, and deploy strict security policies, exclusion rules, enhancing the security posture and hardening guidelines across global endpoints.
• Threat Hunting: Proactively search environment telemetry for hidden adversary behaviours and indicators of compromise (IoCs).
• Malware Analysis: Inspects suspicious files, memory dumps, or scripts to understand attacker methods and build defenses.
• Root Cause Analysis: Perform deep-dive forensic analysis on compromised hosts and write comprehensive post-incident reports.
• Vendor Escalation: Partner with tier-4 vendor support to resolve software bugs, driver conflicts, or complex platform issues.

Policy & Safe Management

• Design safes: Establish safe structures, retention periods, and permissions.
• Tune policies: Optimize Master Policy rules and platform settings.
• Manage Endpoints: Onboard enforce EPP & EDR policies to meet compliance posture
• Enhance Security Posture : Ensure on Security Policy enforcement and effectiveness

Secondary Responsibilities (Secondary Skill: Vulnerability Management)

• Vulnerability Scanning: Schedule and oversee network and host-based vulnerability assessments using tools like Tenable, Qualys, or Rapid7.
• Risk Prioritization: Analyze vulnerability scan reports to prioritize remediation based on active threats and business impact.
• Remediation Tracking: Collaborate with IT and system administration teams to ensure timely patching of critical vulnerabilities.
• Compliance Reporting: Generate security posture metrics and compliance dashboards for leadership teams.

Required Qualifications

• Experience: 5+ years in IT security operations, with at least 3 years focused specifically on EDR and endpoint security.
• Certifications: Industry credentials like CISSP, CEH, GCIH, or vendor-specific EDR certifications.
• Technical Knowledge: Deep understanding of Windows, Linux, and macOS operating systems, Active Directory, and cloud environments.