System Security Engineer

Help AG; Dubai; Hybrid; AED 300,000 - 520,000; Full time

Benefits offered by this job

Health insurance

Career progression

Learning & development opportunities

Annual flight tickets

Flexible / Hybrid working

Job summary

Help AG is seeking a System Security Engineer to manage endpoint security technologies, including EDR/XDR platforms, endpoint management, OS hardening, and security monitoring. You will implement security controls, manage patching, device compliance, and support incident response while driving security automation with tools like Microsoft Defender, Intune, and PowerShell.

You will administer Defender for Endpoint, CrowdStrike, and SentinelOne, perform policy configurations, threat hunting, and

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 3–6+ years in endpoint security, system security engineering, or cybersecurity operations.
• Hands-on experience with Microsoft security ecosystem including Defender, Intune, and Entra ID.
• Strong knowledge of endpoint protection technologies, device management, and security hardening practices.
• Scripting with PowerShell required; Python is a plus.
• Familiarity with threat hunting, incident response, and endpoint forensic analysis.

Responsibilities

• Administer and manage endpoint detection and response solutions including Microsoft Defender for Endpoint, CrowdStrike Falcon, and SentinelOne.
• Policy configuration, exclusions management, alert triage, and proactive threat hunting.
• Manage antivirus and exploit protection features such as ASR, Controlled Folder Access, and exploit mitigation.
• Configure Windows Defender Firewall, web filtering, and endpoint device control policies.
• Implement AppLocker and WDAC for application control.
• Apply CIS Benchmarks and Microsoft Security Baselines for hardening.
• Manage GPO and ADMX configurations including local admin restrictions and Windows LAPS.
• Support device provisioning, enrollment workflows, and Windows Autopilot deployments.
• Manage patching via Windows Update for Business, WSUS, and SCCM.
• Deploy and maintain third‑party updates for Chrome, Java, and Acrobat.
• Package and deploy applications via MSI, MSIX, and Win32 formats.

Skills

EDR/XDR

PowerShell

Intune

Defender for Endpoint

Entra ID

Education

Bachelor’s degree in Computer Science or related field

Tools

Microsoft Defender for Endpoint

Intune

SCCM/MECM

Jamf (macOS)

Workspace ONE

Job description

Help AG is looking for a System Security Engineer responsible for managing endpoint security technologies, including EDR/XDR platforms, endpoint management, OS hardening, and security monitoring. The role involves implementing security controls, managing patching and device compliance, supporting incident response, and automating security operations using tools such as Microsoft Defender, Intune, and PowerShell.

Responsibilities

• Administer and manage endpoint detection and response solutions including Microsoft Defender for Endpoint, CrowdStrike Falcon, and SentinelOne.
• Perform policy configuration, exclusions management, alert triage, and proactive threat hunting.
• Manage next-generation antivirus and exploit protection features such as Attack Surface Reduction (ASR), Controlled Folder Access, and exploit mitigation.
• Configure Windows Defender Firewall, web filtering, and endpoint device control policies (e.g., USB restrictions).
• Implement application control using AppLocker and Windows Defender Application Control (WDAC).
• Apply Windows security hardening based on CIS Benchmarks and Microsoft Security Baselines.
• Manage Group Policy (GPO) and ADMX configurations including local admin restrictions and Windows LAPS.
• Manage enterprise device lifecycle using platforms such as Microsoft Intune, Microsoft Endpoint Configuration Manager (SCCM/MECM), Jamf (macOS), and Workspace ONE.
• Support device provisioning, enrollment workflows, and Windows Autopilot deployments.
• Manage patching using Windows Update for Business, WSUS, and SCCM.
• Deploy and maintain third-party updates for applications such as Google Chrome, Java, and Adobe Acrobat.
• Package and deploy applications using MSI, MSIX, and Win32 formats via scripting or management tools.
• Work with identity services including Active Directory and Microsoft Entra ID.
• Configure Conditional Access policies and device compliance policies.
• Manage endpoint security features including BitLocker disk encryption, key escrow, and recovery processes.
• Implement credential protection mechanisms such as Credential Guard, LSASS protection, and disabling legacy protocols (e.g., SMBv1, NTLM where possible).
• Support certificate-based authentication using PKI fundamentals for device, Wi‑Fi, and VPN authentication.
• Analyze endpoint telemetry from Windows Event Logs, Sysmon, and Microsoft Defender advanced hunting.
• Support incident response activities including host isolation, artifact collection, scanning, containment, and remediation.
• Conduct endpoint triage investigations involving processes, services, scheduled tasks, registry persistence, and system artifacts.
• Perform threat hunting using KQL queries and map findings to the MITRE ATT&CK framework.
• Demonstrate understanding of networking concepts including TCP/IP, DNS, DHCP, and proxy configurations.
• Troubleshoot TLS/certificate issues, VPN client behavior, and split-tunneling impacts.
• Understand network requirements and firewall/proxy considerations for EDR and MDM communications.
• Develop automation scripts using PowerShell for device inventory, compliance validation, and remediation tasks.
• Integrate with APIs such as Microsoft Graph and EDR platform APIs for automation and reporting.
• Basic knowledge of Python scripting is considered an advantage.

Qualifications & Skills

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 3-6+ years of experience in endpoint security, system security engineering, or cybersecurity operations.
• Hands‑on experience with Microsoft security ecosystem including Defender, Intune, and Entra ID.
• Strong knowledge of endpoint protection technologies, device management, and security hardening practices.
• Experience with scripting (PowerShell required; Python is a plus).
• Familiarity with threat hunting, incident response, and endpoint forensic analysis.
• Preferred Certifications:
• CompTIA Security+
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)
• Microsoft Security or Endpoint Management certifications

Benefits

• Health insurance with one of the leading global providers for medical insurance
• Career progression and growth through challenging projects and work
• Employee engagement and wellness campaigns and activities throughout the year
• Excellent learning and development opportunities
• Annual flight tickets
• Inclusive and diverse working environment
• Flexible / Hybrid working environment
• Open Door Policy

About Us

Help AG, the cybersecurity arm of Etisalat, is the Middle East's trusted cybersecurity partner, enabling governments, enterprises and critical industries to innovate with confidence. Combining strategic consulting, advanced managed security services and deep technology expertise, Help AG helps organisations strengthen cyber resilience, secure AI adoption and build trusted sovereign digital environments. With regional expertise and a customer‑first approach, Help AG delivers end‑to‑end cybersecurity capabilities designed to protect critical operations, manage evolving risks and support secure digital transformation. Through continuous innovation, trusted partnerships and measurable outcomes, Help AG enables organisations to remain resilient, prepared and confident in a complex digital world.