Endpoint Engineer

VAYUZ Technologies; India; On-site; INR 900,000 - 1,500,000; Full time

Job summary

VAYUZ Technologies is seeking an experienced Endpoint Security Engineer to design and operate enterprise security across endpoints. You will optimize Defender and CrowdStrike deployments, develop detection content, and guide SIEM/SOAR integrations.

The role requires strong EDR/XDR knowledge, MITRE ATT&CK, and scripting skills. You will collaborate with Security Operations, Infra, and Cloud teams, mentor junior engineers, and drive automation through API pipelines and telemetry ingestion.

Qualifications

• 5+ years of experience in endpoint security engineering and operational roles.
• Microsoft Defender suite (MDE, MDI, Defender for Cloud) is required.
• Strong understanding of EDR, XDR, and Zero Trust frameworks.
• Experience with threat hunting, MITRE ATT&CK, and incident response.
• Proficiency in scripting and automation (PowerShell, Python, or similar).

Responsibilities

• Evolve endpoint security architecture leveraging Defender suite and CrowdStrike.
• Provide operational support for EDR/EDR capabilities aligned with security strategy.
• Establish and enforce security baselines, policies across endpoints.
• Guide integrations with SIEM, SOAR, and identity platforms.
• Ensure deployment and optimization of Defender and CrowdStrike.
• Lead advanced config of EDR and threat intel.
• Develop and maintain detection rules, indicators, and hunting queries.
• Lead integrations with SOAR (e.g., Torq, Cortex XSOAR) and API pipelines.

Skills

Endpoint security

EDR/XDR

Threat hunting

Incident response

Scripting & automation

Education

Microsoft Security certifications (SC-200, SC-300)

Tools

Microsoft Defender suite MDE/MDI/Defender for Cloud

PowerShell

Python

Databricks

Power BI

Torq

Cortex XSOAR

Job description

• Evolve endpoint security architecture leveraging Microsoft Defender suite (Defender for Endpoint, Defender for Cloud, Defender for Identity) and CrowdStrike Falcon.
• Provide operational support for endpoint detection, response, and prevention capabilities aligned with enterprise security strategy.
• Establish and enforce security baselines, policies, and standards across all endpoints.
• Provide architectural guidance for integrations with SIEM, SOAR, and identity platforms.
• Ensure and support deployment, and optimize Microsoft Defender and CrowdStrike.
• Lead advanced configuration of:
  • Endpoint Detection & Response (EDR)
  • Behavioral analytics and threat intelligence
• Develop and maintain detection rules, custom indicators, and threat hunting queries.
• platforms.(TORQ)

Operations & Optimization

• Continuously tune detection logic to reduce false positives and improve signal fidelity.
• Monitor platform health, performance, and coverage across endpoints.
• Conduct gap analysis and implement improvements in endpoint visibility and protection.
• Support incident response efforts, including root cause analysis and containment strategies.

Integration & Automation

• Integrate Defender and CrowdStrike with enterprise tools such as:
• SOAR platforms (e.g., Torq, Cortex XSOAR)
• Build API-based integrations and automation pipelines to streamline security operations.
• Enable telemetry ingestion into centralized data platforms (e.g., Databricks, Power BI).
• Work closely with Security Operations, Infrastructure, and Cloud teams.
• Provide technical leadership and mentorship to junior engineers.
• Act as a subject matter expert for endpoint security technologies.
• Support vendor evaluations and proof-of-concept initiatives.

Qualifications:

• 5+ years of experience in endpoint security engineering and operational roles.
• Microsoft Defender suite (MDE, MDI, Defender for Cloud)
• Strong understanding of EDR, XDR, and Zero Trust frameworks.
• Experience with threat hunting, MITRE ATT&CK framework, and incident response.
• Proficiency in scripting and automation (PowerShell, Python, or similar).

Preferred –

• Experience with Microsoft Sentinel or other SIEM platforms.
• Familiarity with SOAR platforms (Torq preferred)
• Knowledge of cloud security (Azure)
• Experience with data analytics platforms (Databricks, Power BI).
• Microsoft Security certifications (SC-200, SC-300)