Lead Endpoint Security Engineer: OS Hardening & EDR

Dyson; Kuala Lumpur; On-site; MYR 120,000 - 190,000; Full time

Job summary

Dyson is seeking an Endpoint Security Engineer to define endpoint hardening standards across Windows, macOS, and Linux, and to lead security baselines enterprise‑wide. You will drive EDR/XDR controls, manage device compliance, and support incident response with hands‑on leadership across global device estates.

As a senior technical lead, you will design automated policies, monitor health telemetry, and mentor junior staff while aligning with threat intelligence and MITRE ATT&CK techniques to

Qualifications

• 5–7 years’ technical experience in endpoint security engineering, OS hardening, and endpoint management at scale.
• Deep engineering knowledge of Windows, macOS, Linux security architectures and cross‑platform EDR deployment.
• Certifications such as SC-200, GCED, or CISSP are desirable.

Responsibilities

• Define, implement and enforce security baselines across Windows, macOS, and Linux fleets.
• Lead EDR/XDR control engineering and tune security capabilities.
• Design device compliance policies and attestations for access control.
• Drive vulnerability and configuration drift reduction across endpoints.
• Conduct endpoint security reviews and support incident investigations.

Skills

Endpoint security engineering

OS hardening

Multi-OS security architectures

EDR deployment

Threat modeling & risk

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Defender for Endpoint

Intune

JAMF

Microsoft Security Baselines

CIS Benchmarks

Endpoint management systems

Job description

Dyson is seeking an Endpoint Security Engineer to define endpoint hardening standards across Windows, macOS, and Linux, and to lead security baselines enterprise‑wide. You will drive EDR/XDR controls, manage device compliance, and support incident response with hands‑on leadership across global device estates.

As a senior technical lead, you will design automated policies, monitor health telemetry, and mentor junior staff while aligning with threat intelligence and MITRE ATT&CK techniques to