Endpoint Security Engineer: Incident Response & Compliance

Thrive IT Systems; Greater London; Presencial; GBP 65.000 - 90.000; Jornada completa

Descripción de la vacante

Thrive IT Systems in Greater London is seeking a skilled Endpoint Security Engineer to deploy and maintain security agents, manage incidents, and ensure regulatory compliance across all assets. The role involves updating playbooks as tools evolve and collaborating to close vulnerabilities.

The ideal candidate will have strong Windows and EDR experience, knowledge of encryption, and proficiency with SIEM and firewall technologies. London-based, on-site role with opportunities for growth.

Formación

• Industry certifications such as CISSP, CEH, SANS are beneficial.
• Vendor certifications such as Cisco, Juniper, CheckPoint are beneficial.

Responsabilidades

• Deploy and maintain endpoint security agents (AV, encryption, firewall).
• Resolve incidents for endpoint security components.
• Update process and playbook docs as new tools and standards are implemented.
• Ensure compliance across all assets with multiple security frameworks.
• Ensure compliance across all assets against security standards.
• Respond and resolve DLP false positives.
• Create, maintain and service rules in privilege management solution.
• Ensure all assets are meeting logging standards.
• Collaborates with responsible areas to develop remediation plans to track vulnerabilities to completion.

Conocimientos

Windows OS

EDR solution

Vulnerability management

TCP/IP networking

SIEM operations

PowerShell scripting

Endpoint protection

Security architecture

Next-generation firewalls

Microsoft Windows Server/Desktop

Data encryption & key management

Incident response

Herramientas

CrowdStrike EDR

Next-Generation Firewalls

PowerShell scripting

Windows Server

Descripción del empleo

Thrive IT Systems in Greater London is seeking a skilled Endpoint Security Engineer to deploy and maintain security agents, manage incidents, and ensure regulatory compliance across all assets. The role involves updating playbooks as tools evolve and collaborating to close vulnerabilities.

The ideal candidate will have strong Windows and EDR experience, knowledge of encryption, and proficiency with SIEM and firewall technologies. London-based, on-site role with opportunities for growth.