Endpoint & Email Security Engineer

Job Title: Senior Security Engineer (Endpoint & Email Security)
Location: Saudi Arabia (Onsite)
Experience Level: 4-8 Years

Job Description: We are seeking a Senior Security Engineer with expertise in Endpoint and Email Security to join our team onsite in Saudi Arabia. The ideal candidate will have hands-on experience in the implementation and operations of various security tools, including but not limited to EDR (Endpoint Detection and Response), Email Security, and Vulnerability Assessment solutions. This position requires a professional with a strong understanding of security protocols, incident response, and managed detection and response (MDR) capabilities.

Key Responsibilities:

• EDR Implementation & Operations:
  • Deploy, configure, and manage endpoint security solutions such as Symantec, Trellix (Fireeye), Crowdstrike, Trend Micro, and others.
  • Perform routine maintenance, monitoring, and analysis of endpoint security systems to ensure optimal performance.
  • Respond to incidents, perform root cause analysis, and develop remediation strategies in case of endpoint security breaches.
  • Ensure all systems have EDR agents installed & running properly.
  • Rollout of agents & perform troubleshooting in case of issues encountered.
• Email Security:
  • Implement and operate email security solutions like Cisco and Symantec to ensure the protection of corporate email systems.
  • Configure and manage anti-phishing, anti-spam, and encryption policies for email communications.
  • Troubleshoot and resolve email security-related incidents, ensuring minimal disruption to business operations.
• Vulnerability Assessment:
  • Conduct regular vulnerability assessments using tools like Tenable, Qualys, and other vulnerability scanning technologies.
  • Identify, assess, and prioritize security vulnerabilities and recommend remediation strategies.
  • Collaborate with other teams to ensure vulnerabilities are addressed and remediated within established SLAs.
  • Manage and respond to security incidents involving endpoints, emails, and network vulnerabilities.
  • Coordinate with internal teams and third-party vendors to ensure effective incident resolution.
  • Document incident reports, conduct post-incident analysis, and make recommendations for improved security measures.
• Managed Detection & Response (MDR):
  • Assist in the management and execution of MDR services, including continuous monitoring and threat detection.
  • Proactively identify potential security threats and implement strategies to mitigate risks.
  • Work closely with SOC teams to improve overall threat detection and response capabilities.
• Security Awareness & Training:
  • Collaborate with internal stakeholders to raise awareness regarding endpoint and email security best practices.
  • Participate in the development and delivery of security training programs for employees.

Experience:

• 5-8 years of experience in the cybersecurity domain, with a focus on endpoint protection, email security, and vulnerability management.
• Proven experience working with EDR solutions such as Symantec, Trellix Fireeye, Crowdstrike, and Trend Micro.
• Hands-on experience with Email Security solutions like Cisco or Symantec.
• Practical experience in Vulnerability Assessment using tools like Tenable and Qualys.
• Strong background in Incident Management and Response, including conducting thorough investigations, root cause analysis, and post-mortem documentation.
• Familiarity with Managed Detection and Response (MDR) frameworks and services.

Technical Skills:

• Deep understanding of cybersecurity principles and practices, especially in the context of endpoint and email security.
• Proficient in using and configuring security tools and platforms (EDR, Email Security, Vulnerability Scanners).
• Knowledge of security frameworks, such as NIST, CIS, and ISO 27001.
• Familiarity with SIEM (Security Information and Event Management) platforms is a plus.

Soft Skills:

• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication skills, both verbal and written, to effectively report security incidents and collaborate with teams.
• Ability to work independently and manage multiple security priorities in a fast-paced environment.

Certifications: (Preferred but not mandatory)
CISSP (Certified Information Systems Security Professional)