Endpoint Security Engineer

Largeton Group; Charlotte (NC); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Largeton Group is seeking a highly skilled Endpoint Security Engineer for a hybrid role in Charlotte, NC. The successful candidate will design, implement, and maintain enterprise endpoint security solutions, heavily focused on Tanium engineering. You will be part of a collaborative team securing thousands of endpoints while driving improvements in endpoint detection and vulnerability management.

The ideal candidate will have proven experience as an Endpoint Security Engineer in a large enterprise environment and substantial hands-on experience with Tanium. Knowledge of Windows, Linux, and tools like CrowdStrike and Splunk is essential.

Qualifications

• Proven experience as an Endpoint Security Engineer in a large enterprise environment.
• Hands-on Tanium engineering experience is a must.

Responsibilities

• Engineer & optimize endpoint security solutions.
• Configure, tune, and manage Tanium modules.
• Deploy and maintain EDR tools such as CrowdStrike.
• Investigate endpoint security incidents and perform root cause analysis.
• Develop and enforce endpoint security policies.

Skills

Endpoint Security Engineering

Tanium Engineering

PowerShell Scripting

CyberArk

CrowdStrike

Tools

Splunk

Tanium

Linux

Windows

Job description

Endpoint Security Engineer – Hybrid in Charlotte, NC (4 days onsite / 1 day remote)

Duration: 06+ months. Interview onsite.

Overview

We are seeking a highly skilled Endpoint Security Engineer to design, implement, and maintain enterprise endpoint security solutions across a large-scale environment. This role is heavily focused on hands‑on Tanium engineering, requiring deep experience configuring, tuning, and optimizing Tanium modules—not just monitoring or utilizing existing deployments. This is an opportunity to join a collaborative, high‑performing team responsible for securing thousands of endpoints and driving continuous improvement across endpoint detection, response, and vulnerability management.

Key Responsibilities

• Engineer & optimize endpoint security solutions design, build, implement, and maintain endpoint security tools, with a strong focus on Tanium platform engineering.
• Tanium Platform Ownership.
• Configure, tune, and manage Tanium modules including Comply Plus, Core Platform, Deploy, Discover, Enforce, Integrity Monitor, Patch, Performance, Threat Response.
• Patch & Vulnerability Management: Automate and manage OS and third‑party patching across a large enterprise environment to proactively remediate vulnerabilities.
• Endpoint Detection & Response (EDR): Deploy and maintain tools such as CrowdStrike, ensuring proper configuration and response workflows.
• Incident Response & Forensics: Investigate endpoint security incidents, isolate affected systems, and perform root cause analysis to prevent recurrence.
• Security Policy & Controls: Develop and enforce endpoint security policies including MFA, device controls, and user access standards.
• Telemetry & Threat Analysis: Correlate endpoint and log data (e.g., via Splunk) to identify complex attack patterns and security risks.
• Automation & Scripting: Build scripts using PowerShell, Python, or Bash to streamline deployments, remediation actions, and monitoring.

Required Qualifications

• Proven experience as an Endpoint Security Engineer in a large enterprise environment.
• Hands‑on Tanium engineering experience (must have built, configured, and maintained—not just used).
• Expertise across multiple Tanium modules listed above.
• Strong knowledge of Windows and Linux operating systems.
• Experience with CrowdStrike (EDR), Splunk (log analysis / SIEM), and CyberArk (privileged access management).
• Experience supporting large endpoint environments (thousands of devices).

Preferred Qualifications

• Certifications such as CISSP, CompTIA Security+, or similar.
• Strong background in automation and security tooling optimization.