Endpoint Security Automation Engineer (EDR/XDR)

GEICO; Bethesda (MD); On-site; USD 110,000 - 230,000; Full time

Job summary

GEICO is seeking an Endpoint and Automation Security Engineer to design, implement, and optimize security across the enterprise. You will focus on EDR/XDR, scripting, orchestration, and automation to strengthen defenses and reduce risk.

Collaboration with infrastructure, cloud, and security operations teams is essential. The role requires strong technical expertise in endpoint security platforms, automation frameworks, and a track record of delivering reliable security automation.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or equivalent work experience.
• 3–5 years of experience in cybersecurity, endpoint engineering, or security automation.
• Experience administering endpoint security platforms.
• Experience with scripting or automation (PowerShell, Python, Bash, or similar).
• Understanding of endpoint security principles, threat detection, malware defense, and IR processes.
• Familiarity with Windows and Linux and enterprise endpoint management.
• Experience with SIEM or security monitoring platforms.
• Knowledge of vulnerability management and remediation.

Responsibilities

• Administer, maintain, and optimize endpoint security platforms including EDR/XDR, device control, and endpoint management.
• Develop and maintain security automation workflows to improve detection, response, remediation, and efficiency.
• Create and support scripts and automation tools using PowerShell, Python, Bash, or similar languages.
• Monitor endpoint security alerts and collaborate with Security Operations during incidents.
• Implement endpoint hardening standards for Windows, macOS, Linux, and mobile platforms.
• Integrate endpoint tooling with SIEM, ticketing, orchestration, and monitoring systems.
• Collaborate with cross-functional teams to secure infrastructure and cloud initiatives.

Skills

EDR/XDR

Security Automation

Orchestration

PowerShell

Python

Bash

API Integrations

Endpoint Hardening

Cloud Security Fundamentals

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

Ansible

SCCM

Intune

Jamf

Puppet

Job description

GEICO is seeking an Endpoint and Automation Security Engineer to design, implement, and optimize security across the enterprise. You will focus on EDR/XDR, scripting, orchestration, and automation to strengthen defenses and reduce risk.

Collaboration with infrastructure, cloud, and security operations teams is essential. The role requires strong technical expertise in endpoint security platforms, automation frameworks, and a track record of delivering reliable security automation.