Senior Endpoint Detection & Security Engineer (Remote)

Coffee Chat; Abu Dhabi; Remote; AED 150,000 - 270,000; Full time

Job summary

Coffee Chat is seeking an experienced Senior Endpoint Detection Specialist to design, administer, optimize, and maintain endpoint detection and response capabilities across the enterprise. The role emphasizes detecting, investigating, analyzing, and responding to endpoint threats, with collaboration across Security Operations, Infrastructure, Cloud, and IAM teams.

The ideal candidate brings hands-on experience with enterprise endpoint security platforms, telemetry, attack behavior analysis, SIEM

Qualifications

• Hands-on experience with enterprise endpoint security platforms, endpoint telemetry, attack behavior analysis, SIEM integration, threat intelligence, and established cybersecurity frameworks.

Responsibilities

• Administer, monitor, and optimize endpoint detection and response platforms across IT environments.
• Monitor and triage endpoint security alerts from EDR, antivirus, and related monitoring tools.
• Conduct threat hunting and advanced endpoint analysis to identify malicious behavior not detected by existing alerts.
• Design, develop, and tune endpoint detection rules and behavior analytics across the MITRE ATT&CK framework.
• Investigate suspected malware infections and perform analysis using approved tools and isolation environments.

Skills

Endpoint security platforms

Endpoint telemetry

Attack behavior analysis

SIEM integration

Threat intelligence

Cybersecurity frameworks

Tools

KQL / NQL

SQL

Sigma

Job description

Coffee Chat is seeking an experienced Senior Endpoint Detection Specialist to design, administer, optimize, and maintain endpoint detection and response capabilities across the enterprise. The role emphasizes detecting, investigating, analyzing, and responding to endpoint threats, with collaboration across Security Operations, Infrastructure, Cloud, and IAM teams.

The ideal candidate brings hands-on experience with enterprise endpoint security platforms, telemetry, attack behavior analysis, SIEM