Cyber Defense Engineering II - Endpoint Protection

INTEC CME India Pvt Ltd; Bengaluru; Presencial; INR 900.000 - 1.200.000; Jornada completa

Descripción de la vacante

CME Group is seeking a Cyber Defense Engineering - Endpoint Protection professional to ensure 100% endpoint security agent deployment, visibility, and control across Windows, Linux, and macOS. You will deploy, upgrade, and troubleshoot agents, optimize policy configurations, and support enterprise‑wide AV/EDR migrations.

Responsibilities include health monitoring, incident triage (Tier 1/2), and documentation.

Formación

• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or 2–4 years in IT security, systems support, or engineering).
• Strong grasp of Windows, Mac, and Linux internals, command-line usage and log analysis.
• Proficiency in at least two scripting languages (PowerShell, Bash, Python).
• Understanding of networking fundamentals including TCP/IP and DNS.
• Foundational IT security certifications (e.g., CompTIA Security+) and endpoint security certifications are preferred.

Responsabilidades

• Manage deployment, health, and upgrades of endpoint security agents across multiple OS environments.
• Assist in platform migrations of AV/EDR controls ensuring coverage during transitions.
• Configure and maintain endpoint security policies including prevention, detection, response, and exclusions.
• Monitor for non‑compliant endpoints and troubleshoot agent health issues.
• Triage and resolve Tier 1/2 security operations tickets and incidents.
• Fine‑tune AV/EDR exclusions to reduce noise without creating gaps.

Conocimientos

Endpoint health monitoring

Windows

Mac

Linux

PowerShell

Bash

Python

Networking fundamentals

SIEM basics

Policy administration

Educación

Bachelor’s degree in Cybersecurity or Computer Science

Descripción del empleo

Role Overview You will become a key member of Cyber Defense Engineering - Endpoint Protection team and will support senior colleagues in configuring and maintaining security controls across the endpoint security domain. Your primary goal is to ensure 100% endpoint security agent deployment, visibility and control enforcement compliance across the enterprise. This will primarily involve: managing endpoint security agent health, deploying and troubleshooting agent version upgrades and security content updates, refining AV / EDR policy configurations and exclusions to reduce "noise" while maintaining high security posture. Additionally, you will play a hands‑on role in ensuring seamless, secure, and performant enterprise-wide AV / EDR control migrations between industry-leading platforms.

Key Responsibilities

• Endpoint Security Agent Management: Work with your Cyber Defense colleagues as well as Desktop, Server, Cloud Compute engineering and other technology teams as required to deploy, update, and troubleshoot endpoint security agents across Windows, Linux, and macOS endpoint environments.
• Platform Management: Assist in driving enterprise-wide deployments and migrations of next‑generation AV / EDR controls, ensuring consistent coverage during transition periods.
• Policy Administration: Assist with the configuration and maintenance of all policies in the endpoint security control domain, primarily including: prevention, detection and response, device control, security content updates, exclusions, network containment and host‑based firewall rules management.
• Health Monitoring: Proactively identify and resolve incidents of non‑compliant compute endpoints with unhealthy endpoint security agent states.
• Issue Resolution (Tier 1/2 ticket management): Monitor the Cyber Defense Engineering - Endpoint Protection ticket queue, taking ownership of tier 1/2 operational support requests and incidents.
• Exclusion Tuning: Work with system owners as required to configure and maintain narrowly defined AV / EDR exclusions to prevent false positives without creating security gaps, while also ensuring system performance.
• Documentation: Upkeep of the team’s internal knowledgebase including all documentation pages and standard operating procedures (SOPs) relating to endpoint security agent and platform management.

Required Skills & Qualifications

Technical Skills & Work Experience

• Education & Experience: Bachelor’s degree in Cybersecurity, Computer Science, or a related technical field (or 2-4 years of equivalent hands‑on experience in IT security, systems support, or engineering related roles).
• OS Fundamentals: Strong grasp of Windows, Mac, and Linux operating system internals, command‑line usage and log analysis.
• Scripting: Basic proficiency in at least two common scripting languages (e.g. PowerShell for Windows environments, Bash for Linux/macOS environments, Python for cross‑platform support).
• Networking: Understanding of networking fundamentals including TCP/IP and DNS (e.g. how endpoints communicate across enterprise networks, how endpoint security agents communicate with cloud‑based cybersecurity platforms).
• Industry Certifications: • Foundational IT security certifications (e.g. CompTIA Security+) • Endpoint security administration oriented certifications are highly preferred / desirable.

Professional & Soft Skills

• Cross‑Functional Collaboration: Strong communication skills with the ability to navigate complex enterprise IT ecosystems and work effectively with other teams and system owners to enforce endpoint security control compliance.
• Analytical Problem‑Solving: Ability to think critically during issue / incident triage and perform root‑cause analysis (For example: when troubleshooting endpoint security agent health issues).
• Adaptability & Time Management: Capable of balancing day‑to‑day operational support and incident ticket queues with long‑term, enterprise‑wide platform maturity efforts.

What Makes a Candidate Stand Out?

• Enterprise Platform Experience: Hands‑on experience supporting enterprise‑grade cybersecurity and/or IT systems management platforms and controls at scale.
• Familiarity with SIEM Query Languages: Working knowledge of one or more SIEM query language for querying endpoint telemetry data (e.g. SPL, KQL, CQL, or UDM Search/YARA‑L).
• API Knowledge: Practical experience of using cybersecurity and/or IT systems management platform APIs for script development (e.g. for report generation and workflow automation).

CME Group: Where Futures are Made

CME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it – all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more. At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal‑opportunity employer, we consider all potential employees without regard to any protected characteristic.

CME Group is the world’s leading derivatives marketplace, where the world comes to manage risk. We enable clients to trade futures, options, cash and OTC markets, optimize portfolios, and analyze data – empowering market participants worldwide to efficiently manage risk and capture opportunities. CME Group exchanges offer the widest range of global benchmark products across all major asset classes based on interest rates, equity indexes foreign exchange energy agricultural products and metals. We meet uncertainty and volatility with confidence and clarity, across the trading lifecycle and around the world.

For U.S. employment, CME Group is legally required to validate a new hire’s employment eligibility by having them complete an Employment Eligibility Verification (Form I-9) accompanied with legally acceptable proof of identity and work authorization (as listed on the Form I-9). CME Group uses E‑Verify, which is an online system operated by the U.S. Department of Homeland Security in partnership with the Social Security Administration to verify employment eligibility and validate social security numbers. Through participation in the E‑Verify program, information entered on Form I-9 will be provided and compared to information available at both of these agencies. See posters below for more details.

E-Verify Notice

E-Verify Notice Español

U.S. Right to Work Notice

U.S. Right to Work Notice Español