Endpoint Defense Lead & Platform Architect

Kyndryl; Maryland; On-site; USD 115,000 - 219,000; Full time

Job summary

Kyndryl is seeking a leader for its Endpoint Defense function to own the operation, tuning, and coverage of the organization's endpoint security across Cortex XDR, Defender for Endpoint, Trend Micro, and other tooling. You will ensure consistent prevention, detection, and telemetry quality to feed the detection pipeline.

You will drive agent coverage, optimize policies with Cyber Defense, and coordinate with SIEM/SOAR.

Qualifications

• Mastery of security tools and technologies across firewalls, IDS/IPS, endpoint security, and SIEMs.
• Strong understanding of Windows and Linux security mechanisms.
• Knowledge of ISO 27001, NIST, GDPR security standards.

Responsibilities

• Own operations, policy, and health for the endpoint defense estate across listed tools.
• Drive agent coverage and configuration integrity across the managed fleet.
• Tune prevention and detection policies balancing efficacy and disruption.
• Consolidate multi-vendor endpoint stack toward consistent coverage.
• Ensure endpoint telemetry feeds XSIAM and detection pipelines.
• Support incident response with containment and forensic data.
• Drive automation for deployment, health monitoring, policy management, remediation, telemetry quality.
• Establish and report on endpoint security KPIs and outcomes.
• Lead and develop the endpoint defense team.

Skills

Security tools

OS security

Security standards & compliance

Leading technologies

Deployment & config best practices

Zero trust architectures

Education

Bachelor’s degree in CS/Cybersecurity/IT or related field

Tools

Palo Alto Cortex XDR

Microsoft Defender for Endpoint

Trend Micro

Job description

Kyndryl is seeking a leader for its Endpoint Defense function to own the operation, tuning, and coverage of the organization's endpoint security across Cortex XDR, Defender for Endpoint, Trend Micro, and other tooling. You will ensure consistent prevention, detection, and telemetry quality to feed the detection pipeline.

You will drive agent coverage, optimize policies with Cyber Defense, and coordinate with SIEM/SOAR.