Cyber Defense Engineering II - Endpoint Protection

CME Group; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

CME Group is seeking a Cyber Defense Engineer to ensure 100% deployment and health of endpoint security agents across Windows, macOS, and Linux. You will support policy configuration, exclusions, and health monitoring to maintain a strong security posture.

In this role, you will participate in enterprise‑wide AV/EDR migrations, manage Tier 1/2 incidents, and collaborate with Desktop, Server, and Cloud teams. A foundational security background and scripting skills are required.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field or 2–4 years of equivalent hands‑on experience.
• Strong knowledge of Windows, Mac, and Linux internals and log analysis.
• Scripting basics in PowerShell, Bash, and Python.
• Understanding of TCP/IP and DNS for endpoint communications.

Responsibilities

• Deploy, update, and troubleshoot endpoint security agents across multiple OS environments.
• Drive deployments and migrations of next‑gen AV/EDR controls enterprise‑wide.
• Configure and maintain endpoint security policies (prevention, detection, response, exclusions).
• Monitor agent health and resolve non‑compliant endpoints and incidents.
• Handle Tier 1/2 tickets and coordinate with system owners for quick resolutions.
• Tune exclusions to reduce noise while maintaining security posture.
• Maintain up‑to‑date documentation and SOPs for endpoint security operations.

Skills

Windows OS

Mac OS

Linux OS

PowerShell

Bash

Python

Networking basics

SIEM query concepts

Analytical problem solving

Cross-functional collaboration

Adaptability & time management

Education

Bachelor’s degree in Cybersecurity or Computer Science or related field

2–4 years IT security/systems support/engineering experience

Foundational IT security certifications (e.g. CompTIA Security+)

Endpoint security administration certifications (desirable)

Job description

Role Overview

You will become a key member of Cyber Defense Engineering - Endpoint Protection team and will support senior colleagues in configuring and maintaining security controls across the endpoint security domain. Your primary goal is to ensure 100% endpoint security agent deployment, visibility and control enforcement compliance across the enterprise.
This will primarily involve: managing endpoint security agent health, deploying and troubleshooting agent version upgrades and security content updates, refining AV / EDR policy configurations and exclusions to reduce \"noise\" while maintaining high security posture.
Additionally, you will play a hands‑on role in ensuring seamless, secure, and performant enterprise-wide AV / EDR control migrations between industry-leading platforms.

Key Responsibilities

• Endpoint Security Agent Management: Work with your Cyber Defense colleagues as well as Desktop, Server, Cloud Compute engineering and other technology teams as required to deploy, update, and troubleshoot endpoint security agents across Windows, Linux, and macOS endpoint environments.
• Platform Management: Assist in driving enterprise-wide deployments and migrations of next-generation AV / EDR controls, ensuring consistent coverage during transition periods.
• Policy Administration: Assist with the configuration and maintenance of all policies in the endpoint security control domain, primarily including: prevention, detection and response, device control, security content updates, exclusions, network containment and host-based firewall rules management.
• Health Monitoring: Proactively identify and resolve incidents of non-compliant compute endpoints with unhealthy endpoint security agent states.
• Issue Resolution (Tier 1/2 ticket management) : Monitor the Cyber Defense Engineering - Endpoint Protection ticket queue, taking ownership of tier 1/2 operational support requests and incidents.
• Exclusion Tuning: Work with system owners as required to configure and maintain narrowly defined AV / EDR exclusions to prevent false positives without creating security gaps, while also ensuring system performance.
• Documentation: Upkeep of the team’s internal knowledgebase including all documentation pages and standard operating procedures (SOPs) relating to endpoint security agent and platform management.

Required Skills & Qualifications

Technical Skills & Work Experience

• Education & Experience: Bachelor’s degree in Cybersecurity, Computer Science, or a related technical field (or 2-4 years of equivalent hands‑on experience in IT security, systems support, or engineering related roles).
• OS Fundamentals: Strong grasp of Windows, Mac, and Linux operating system internals, command-line usage and log analysis.
• Scripting: Basic proficiency in at least two common scripting languages (e.g. PowerShell for Windows environments, Bash for Linux/macOS environments, Python for cross-platform support).
• Networking: Understanding of networking fundamentals including TCP/IP and DNS (e.g. how endpoints communicate across enterprise networks, how endpoint security agents communicate with cloud-based cybersecurity platforms).

Industry Certifications

• Foundational IT security certifications (e.g. CompTIA Security+)
• Endpoint security administration oriented certifications are highly preferred / desirable.

Professional & Soft Skills

• Cross-Functional Collaboration: Strong communication skills with the ability to navigate complex enterprise IT ecosystems and work effectively with other teams and system owners to enforce endpoint security control compliance.
• Analytical Problem-Solving: Ability to think critically during issue / incident triage and perform root-cause analysis (For example: when troubleshooting endpoint security agent health issues).
• Adaptability & Time Management: Capable of balancing day-to-day operational support and incident ticket queues with long-term, enterprise-wide platform maturity efforts.

What Makes a Candidate Stand Out?

• Enterprise Platform Experience : Hands‑on experience supporting enterprise-grade cybersecurity and/or IT systems management platforms and controls at scale.
• Familiarity with SIEM Query Languages : Working knowledge of one or more SIEM query language for querying endpoint telemetry data (e.g. SPL, KQL, CQL, or UDM Search/YARA-L).
• API Knowledge : Practical experience of using cybersecurity and/or IT systems management platform APIs for script development (e.g. for report generation and workflow automation).

CME Group: Where Futures are Made

CME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it – all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more.

At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.