Endpoint Security Engineer

Ciena; Baltimore (MD); On-site; USD 102,000 - 145,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) matching

ESPP

Paid holidays and time off

Job summary

Ciena is seeking a Security Engineer to protect enterprise endpoint and server environments across Windows, macOS, and Linux. You will implement security configurations, manage EDR and firewalls, and analyze SIEM logs to reduce risk. The role collaborates across teams to enforce security standards and drive hardening initiatives.

The position emphasizes a people-first culture with flexible work, strong growth opportunities, and comprehensive benefits. US citizenship is required.

Qualifications

• 4+ years in cybersecurity or security engineering.
• Experience with endpoint/server hardening and security controls.
• Knowledge of CIS Benchmarks, NIST guidance and Zero Trust.
• Familiarity with EDR, SIEM and firewall technologies.
• Analytical, detail-oriented and able to work independently.

Responsibilities

• Design, test, and implement endpoint/server security changes.
• Administer and maintain endpoint security platforms and controls.
• Analyze logs in SIEM to identify risks and gaps.
• Coordinate investigations with vendor support for security tools.
• Execute baseline analyses and hardening enhancements.
• Advise internal teams on security requirements and remediations.
• Document security controls and testing outcomes.

Skills

Cybersecurity

Security engineering

Endpoint security

Threat analysis

Zero Trust principles

Least privilege

Team collaboration

Tools

EDR

SIEM

Host-based firewall

Vulnerability assessment tools

Configuration baseline tools

Job description

As the global leader in high-speed connectivity, Ciena is committed to a people-first approach. Our teams enjoy a culture focused on prioritizing a flexible work environment that empowers individual growth, well-being, and belonging. We're a technology company that leads with our humanity-driving our business priorities alongside meaningful social, community, and societal impact.

Security Engineering plays a critical role in protecting enterprise endpoint and server environments across Windows, macOS, and Linux platforms. This position drives secure configuration management, system hardening, and endpoint security enablement while balancing operational resilience and risk reduction. The role partners across technical teams to maintain consistent security engineering standards and strengthen the organization's security posture.

How you will make an impact:

• Design, test, and implement endpoint and server security configuration changes through established change control processes.
• Administer, troubleshoot, and maintain endpoint security platforms, including EDR solutions, host-based firewalls, and related security controls.
• Analyze system, endpoint, and security event logs within SIEM platforms to identify risks, trends, control gaps, and improvement opportunities.
• Coordinate investigations and issue resolution activities with vendor support teams for security tools and platforms.
• Execute baseline analysis activities and implement system hardening enhancements aligned with approved security standards.
• Consult with internal teams on security requirements, configuration concerns, and risk-based remediation approaches.
• Track project activities and document security controls, configuration decisions, testing outcomes, and implementation status.

The must haves:

• Experience: 4+ years of cybersecurity, security engineering, infrastructure security, or endpoint/server security experience.
• Must be a US Citizen.
• Application of TCP/IP networking concepts, operating system security concepts, and endpoint/server hardening practices.
• Experience supporting EDR, host-based firewall, SIEM, vulnerability assessment, and configuration baseline tools, including log analysis and troubleshooting.
• Application of security configuration standards and frameworks, including CIS Benchmarks, NIST guidance, Zero Trust, and least privilege principles.
• Demonstrated attention to detail, analytical thinking, and problem-solving skills.
• Ability to work independently and collaboratively across technical teams.
• Application of least privilege and Zero Trust access control principles across endpoint and server environments.

Nice to haves:

• Experience identifying automation opportunities for recurring security tasks and operational efficiency improvements.
• Experience promoting secure practices and security engineering standards across an enterprise environment.
• Experience with scripting or automation.
• Ability to support after-hours maintenance activities as needed during US Eastern business operations.

Pay Range: USD 101,600 - 145,000

Pay ranges at Ciena are designed to accommodate variations in knowledge, skills, experience, market conditions, and locations, reflecting our diverse products, industries, and lines of business. Please note that the pay range information provided in this posting pertains specifically to the primary location, which is the top location listed in case multiple locations are available.

In addition to competitive compensation, Ciena offers a comprehensive benefits package, including medical, dental, and vision plans, participation in 401(K) (USA) & DCPP (Canada) with company matching, Employee Stock Purchase Program (ESPP), Employee Assistance Program (EAP), company-paid holidays, paid sick leave, and vacation time. We also comply with all applicable laws regarding Paid Family Leave and other leaves of absence.

At Ciena, we are committed to building and fostering an environment in which our employees feel respected, valued, and heard. Ciena values the diversity of its workforce and respects its employees as individuals. We do not tolerate any form of discrimination.

Ciena is anEqual Opportunity Employer, including disability and protected veteran status.

If contacted in relation to a job opportunity, please advise Ciena of any accommodation measures you may require.