Endpoint Security Engineer: Threat Detection & Remediation

Bell Cyber; Mississauga; On-site; CAD 90,000 - 120,000; Full time

Job summary

Bell Cyber in Mississauga is seeking an Endpoint Security Specialist to admin endpoint security platforms, investigate threats, and strengthen protection across workstations and servers. You will work with the CIC, IT teams and customers to support threat detection, containment and remediation.

You will deploy agents, tune policies and coordinate incident response, while integrating telemetry with SIEM and ServiceNow. A strong background in Windows security and scripting is preferred.

Qualifications

• 3+ years of cybersecurity or endpoint administration experience.
• Hands-on administration with at least one of CrowdStrike Falcon, Defender for Endpoint or SentinelOne.
• Experience deploying agents and managing policies.
• Knowledge of Windows security; macOS/Linux a plus.

Responsibilities

• Deploy, configure and maintain endpoint security platforms and policies.
• Investigate alerts and coordinate containment and remediation.
• Conduct proactive threat hunting and refine detection queries and rules.
• Integrate telemetry with SIEM, ticketing and automation tools; document work in ServiceNow.
• Support endpoint hardening, onboarding and operational reporting.

Skills

Threat hunting

Incident response

Troubleshooting

Documentation

Education

Post-secondary education in cybersecurity or IT

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

SentinelOne

SIEM

ServiceNow

PowerShell

Python

KQL

Job description

Bell Cyber in Mississauga is seeking an Endpoint Security Specialist to admin endpoint security platforms, investigate threats, and strengthen protection across workstations and servers. You will work with the CIC, IT teams and customers to support threat detection, containment and remediation.

You will deploy agents, tune policies and coordinate incident response, while integrating telemetry with SIEM and ServiceNow. A strong background in Windows security and scripting is preferred.