Endpoint Security & Automation Engineer

Geico; Palo Alto (CA); On-site; USD 110,000 - 230,000; Full time

Job summary

GEICO in Palo Alto is seeking an Endpoint and Automation Security Engineer to design, implement, and optimize security across the enterprise. You will build and maintain EDR/XDR, define hardening standards, automate detection, and collaborate with infrastructure, cloud, and security operations teams to strengthen controls.

You will script with PowerShell, Python, or Bash, integrate endpoint tooling with SIEM, and contribute to audits, incident response, and remediation efforts.

Qualifications

• Bachelor’s degree in cybersecurity, IT, CS, or related field or equivalent work experience.
• 3–5 years of experience in cybersecurity, endpoint engineering, systems administration, or security automation.
• Experience administering endpoint security platforms.
• Experience scripting or automation using PowerShell, Python, Bash.
• Familiarity with SIEM or security monitoring platforms.

Responsibilities

• Administer, maintain, and optimize endpoint security platforms (EDR/XDR).
• Develop security automation workflows to improve detection, response, remediation, and operational efficiency.
• Create and support scripts using PowerShell, Python, Bash.
• Monitor endpoint security alerts and assist in investigations and incident response.
• Collaborate with cross-functional teams to secure infrastructure and cloud initiatives.

Skills

EDR/XDR

Automation scripting

PowerShell

Python

Bash

SIEM

Education

Bachelor's degree or equivalent

Tools

Ansible

SCCM

Intune

Jamf

Puppet

Job description

GEICO in Palo Alto is seeking an Endpoint and Automation Security Engineer to design, implement, and optimize security across the enterprise. You will build and maintain EDR/XDR, define hardening standards, automate detection, and collaborate with infrastructure, cloud, and security operations teams to strengthen controls.

You will script with PowerShell, Python, or Bash, integrate endpoint tooling with SIEM, and contribute to audits, incident response, and remediation efforts.