Endpoint Security Engineer

India Fan Corporation; Hyderabad; On-site; INR 3,000,000 - 4,500,000; Full time

Job summary

India Fan Corporation is seeking an experienced Endpoint Security Engineer to design, implement, and optimize security controls across enterprise endpoints and emails.

The role emphasizes hands-on configuration, continuous improvement, and collaboration with Security Operations to strengthen threat detection and response capabilities. Strong experience with Defender for Endpoint and related EDR/XDR tools is required.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field.
• 7–10 years of cybersecurity or security engineering experience.
• Hands-on experience with Microsoft Defender for Endpoint and endpoint security platforms.
• Experience with endpoint management tools such as Intune, JAMF or SCCM.

Responsibilities

• Deploy and manage CrowdStrike Falcon, SentinelOne or similar XDR platforms.
• Own architecture, implementation, integration, and lifecycle support.
• Tune policies to detect phishing, BEC, and malicious attachments.
• Configure email protection controls (SPF, DKIM, DMARC) and security baselines.
• Collaborate with Security Operations to improve detection rules and remediation.

Skills

Microsoft Defender for Endpoint

EDR/XDR expertise

Security policy tuning

Cloud security integration

PowerShell scripting

Education

Bachelor's degree in Cybersecurity/CS/IS

Tools

Intune

JAMF

SCCM/MECM

CrowdStrike Falcon

SentinelOne

Microsoft Defender for Endpoint

Job description

Role : Endpoint Security Engineer

Summary

We are seeking an Endpoint Security Engineer to support the design, implementation, and optimization of Cloudstrike or Palo alto or Microsoft security technologies that protect enterprise endpoint and email environments.

This role focuses on engineering, configuration, and continuous improvement of Microsoft Defender or any EDR/XDR for Endpoint to strengthen the organizations cybersecurity posture.

The ideal candidate will have hands-on experience implementing security controls, tuning detection capabilities, and partnering with security operations teams to improve threat detection and response.

Key Responsibilities

• Hands-on experience deploying and managing CrowdStrike Falcon, SentinelOne, or comparable XDR platforms within cloud environments.
• End-to-End Platform Ownership : Proven responsibility for architecture, implementation, integration, daily operations, troubleshooting, upgrades, and ongoing lifecycle support.
• Engineer and tune policies to detect and prevent phishing, business email compromise (BEC), and malicious attachments.
• Cloud and Endpoint Ecosystem : Strong experience with AWS, GCP and Azure endpoint-management technologies such as Microsoft Intune, JAMF, SCCM/MECM, or equivalent platforms.
• Platform Engineering : Hands-on expertise with agent deployment, policy configuration, version upgrades, performance tuning, exclusion management, troubleshooting, health monitoring, and platform migrations.
• Configure and optimize email authentication and protection controls such as SPF, DKIM, and DMARC.
• Partner with Security Operations teams to improve detection rules and remediation workflows.
• Support attack simulation training campaigns and security awareness initiatives.

Microsoft Defender For Endpoint (Endpoint Security Engineering)

• Deploy and configure Microsoft Defender for Endpoint capabilities across enterprise endpoints.
• Implement and manage endpoint security features including :
• Endpoint Detection & Response (EDR)
• Attack Surface Reduction (ASR) rules
• Web and network protection
• Device control policies
• Endpoint vulnerability management
• Engineer and maintain endpoint security baselines and hardening standards.
• Tune detection rules and alerts to reduce noise while maintaining strong threat coverage.
• Assist with investigation and remediation of endpoint security incidents when needed.

Platform Engineering & Security Integration

• Support automation and response workflows using PowerShell and Microsoft security APIs.
• Maintain documentation for configurations, engineering standards, and operational procedures.
• Collaborate with infrastructure, cloud, and identity teams to implement Zero Trust security controls.

Required Qualifications

• Bachelors degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience).
• 7 to 10 years of cybersecurity or security engineering experience.
• Hands-on experience with :
• Microsoft Defender for Endpoint
• Microsoft 365 Security & Compliance Center
• Holding an end-to-end implementation experience with endpoint security and EDR/XDR platforms.
• Experience with endpoint management tools such as Intune, JAMF or SCCM.

Preferred Qualifications

• Microsoft security certifications (CH, SC-200, SC-300, MS-500, or similar).
• CrowdStrike Certified Falcon Administrator (CCFA).
• Experience integrating Cloudstrike, EDR/XDR tools, Microsoft Defender and SentinelOne.
• Experience with security automation using PowerShell/any other scripting languages.
• Knowledge of Zero Trust security architecture.
• Familiarity with vulnerability management tools and processes.

Key Competencies

• Strong technical problem-solving skills with security mindset.
• Ability to design and improve security configurations to strengthen the endpoint security.
• Detail-oriented with strong documentation practices.
• Effective collaboration with security operations and infrastructure teams.
• Ability to balance security with operational usability.

(ref:hirist.tech)