Endpoint Security Automation Engineer

Government Employees Insurance Company; Palo Alto (CA); On-site; USD 110,000 - 230,000; Full time

Job summary

GEICO in Palo Alto is seeking an Endpoint and Automation Security Engineer to design, implement, and improve endpoint security and automation across the enterprise. You will work with infrastructure, cloud, and security operations teams to strengthen security posture, develop automation, and reduce operational risk.

The ideal candidate has 3–5 years in cybersecurity or endpoint engineering, experience with EDR/XDR, scripting (PowerShell, Python, Bash), and SIEM familiarity.

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity or IT.
• 3-5 years of cybersecurity/endpoint engineering experience.
• Experience administering endpoint security platforms.
• Experience with scripting or automation using PowerShell, Python, Bash.
• Knowledge of Windows and Linux and enterprise endpoint management.
• Experience with SIEM or security monitoring platforms.
• Strong analytical and problem-solving skills.
• Effective communication to technical and non-technical audiences.

Responsibilities

• Administer and optimize endpoint security platforms (EDR/XDR).
• Develop security automation workflows for detection and response.
• Create and support scripts and automation tools.
• Monitor alerts and assist in investigations and incident response.
• Implement endpoint hardening standards for Windows, macOS, Linux, and mobile.
• Collaborate with cross-functional teams to secure cloud initiatives.

Skills

EDR/XDR

Scripting

Automation workflows

Incident response

Windows/Linux admin

SIEM experience

Vulnerability management

Communication

Education

Bachelor's degree or equivalent in cybersecurity/IT

Tools

PowerShell

Python

Bash

SIEM tooling

API integrations

Job description

GEICO in Palo Alto is seeking an Endpoint and Automation Security Engineer to design, implement, and improve endpoint security and automation across the enterprise. You will work with infrastructure, cloud, and security operations teams to strengthen security posture, develop automation, and reduce operational risk.

The ideal candidate has 3–5 years in cybersecurity or endpoint engineering, experience with EDR/XDR, scripting (PowerShell, Python, Bash), and SIEM familiarity.