Endpoint Security Engineer, MS (AL-FNC260602 003/01)

Xcellink Pte Ltd; Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

Xcellink Pte Ltd in Singapore seeks an experienced Endpoint Security Engineer to oversee enterprise endpoint security operations focused on Microsoft Defender for Endpoint (MDE). The role involves administration, monitoring, and continuous improvement of protection technologies, with collaboration across cybersecurity, infrastructure and operations teams.

The ideal candidate will have 2+ years in IT/cybersecurity, hands-on MDE experience, and familiarity with HIPS/HIDS, Windows and Linux

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related discipline.
• Minimum two years of professional experience in IT, cybersecurity, or endpoint security operations.
• At least one year hands-on experience with Microsoft Defender for Endpoint (MDE).
• Experience managing or supporting HIPS and HIDS.
• Working knowledge of Windows and/or Red Hat Linux administration.
• Strong ability to manage multiple priorities in a fast-paced environment with good communication skills.
• Security clearance is required.

Responsibilities

• Oversee and administer Microsoft Defender for Endpoint (MDE) across the organization.
• Configure, deploy and maintain endpoint security controls including anti-malware, firewall, and device control.
• Monitor endpoint security posture and report security gaps and improvements.
• Manage lifecycle of Defender agents: deployment, upgrades, maintenance and retirement.
• Plan and execute MDE upgrades and agent rollouts with minimal business disruption.
• Provide Level 2 and Level 3 security incident support and investigate alerts.
• Collaborate with infrastructure and security teams to keep protection aligned with policies.
• Apply ITIL practices to incident, problem and change management processes.
• Maintain and update technical documentation, SOPs and runbooks.

Skills

Endpoint security operations

Communication & collaboration

Analytical skills

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft Defender for Endpoint (MDE)

Host Intrusion Prevention Systems (HIPS)

Host Intrusion Detection Systems (HIDS)

Windows system administration

Red Hat Linux administration

PowerShell

Python

Symantec Endpoint Protection Manager (SEPM)

Job description

We are seeking an experienced Endpoint Security Engineer to oversee and strengthen enterprise endpoint security operations. This role is responsible for the administration, monitoring, optimization, and continuous enhancement of endpoint protection technologies, with a primary focus on Microsoft Defender for Endpoint (MDE). The successful candidate will play a key role in safeguarding corporate endpoints against emerging cyber threats while collaborating closely with cybersecurity, infrastructure, and operations teams.

Key Responsibilities

Endpoint Security Administration

• Manage, administer, and support Microsoft Defender for Endpoint (MDE) across the organization.
• Configure, deploy, and maintain endpoint security controls, including anti-malware protection, intrusion prevention, firewall policies, and device control configurations.
• Monitor endpoint security posture and produce regular reports to identify security gaps, compliance issues, and areas for improvement.
• Oversee the complete lifecycle management of Microsoft Defender agents, including deployment, upgrades, maintenance, and retirement.
• Plan and execute MDE upgrades and agent rollouts during scheduled maintenance windows while ensuring minimal disruption to business operations.

Security Operations & Technical Support

• Provide Level 2 and Level 3 operational support for endpoint security incidents, service requests, and technical issues.
• Monitor and investigate endpoint security alerts, security events, and potential threats.
• Conduct root cause analysis and implement corrective actions to mitigate recurring security issues.
• Collaborate with infrastructure and security teams to ensure endpoint protection remains effective and aligned with organizational policies.

IT Service Management

• Apply ITIL best practices across Incident Management, Problem Management, and Change Management processes.
• Maintain accurate and detailed records of incidents, investigations, remediation actions, and service requests within the ticketing system.
• Ensure adherence to established Service Level Agreements (SLAs) and timely closure of assigned tickets.

Documentation & Knowledge Management

• Develop, review, and maintain technical documentation, standard operating procedures (SOPs), troubleshooting guides, and knowledge base articles.
• Create and update operational runbooks to support consistent execution of routine security and support activities.
• Share knowledge and best practices with internal teams to improve operational effectiveness.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline.

• Minimum two years of professional experience in IT, cybersecurity, or endpoint security operations.
• At least one year of hands‑on experience with Microsoft Defender for Endpoint (MDE).
• Experience managing or supporting Host Intrusion Prevention Systems (HIPS) and Host Intrusion Detection Systems (HIDS).
• Working knowledge of Windows and/or Red Hat Linux system administration.
• Strong ability to manage multiple priorities in a fast-paced environment, with excellent communication, analytical, and interpersonal skills.
• Security clearance is required.

Preferred Qualifications

• Experience with Symantec Endpoint Protection Manager (SEPM) or similar endpoint protection platforms.
• Knowledge of automation and scripting using languages such as PowerShell, Python, or similar technologies.
• Familiarity with endpoint security best practices, threat detection methodologies, and security operations processes.
• Relevant cybersecurity certifications would be advantageous.