Endpoint Security Engineer - Ciena

Polluxa, Inc.; Baltimore (MD); On-site; USD 100,000 - 160,000; Full time

Job summary

Ciena in the United States is seeking a Security Engineer to drive secure configuration management, system hardening, and endpoint security enablement across Windows, macOS, and Linux.

You will partner with technical teams to strengthen security posture, analyze logs in SIEM, manage EDR and firewalls, and implement baseline changes via formal change control. This role emphasizes independent work and collaboration to reduce risk while enabling resilient operations.

Qualifications

• 4+ years of cybersecurity, security engineering, infrastructure security, or endpoint/server security experience.
• Experience supporting EDR, host-based firewall, SIEM, vulnerability assessment, and configuration baseline tools.
• Knowledge of CIS Benchmarks, NIST guidance, Zero Trust, and least privilege principles.
• Strong attention to detail, analytical thinking, and problem-solving skills.
• Ability to work independently and collaboratively across technical teams.

Responsibilities

• Design, test, and implement endpoint and server security configuration changes through change control processes.
• Administer and maintain endpoint security platforms, including EDR, host-based firewalls, and related controls.
• Analyze system, endpoint, and security logs within SIEM platforms to identify risks and improvement opportunities.
• Coordinate investigations with vendor support teams for security tools and platforms.
• Execute baseline analysis and implement hardening enhancements aligned with security standards.
• Consult with internal teams on security requirements, configuration concerns, and risk-based remediation.
• Track project activities and document security controls, decisions, testing outcomes, and implementation status.

Skills

Cybersecurity

Endpoint Security

Analytical thinking

Problem solving

Independent work

Tools

EDR solutions

Host-based firewall

SIEM tools

Vulnerability assessment

Configuration baselines

Job description

As the global leader in high-speed connectivity, Ciena is committed to a people-first approach. Our teams enjoy a culture focused on prioritizing a flexible work environment that empowers individual growth, well-being, and belonging. We’re a technology company that leads with our humanity—driving our business priorities alongside meaningful social, community, and societal impact.

Security Engineering plays a critical role in protecting enterprise endpoint and server environments across Windows, macOS, and Linux platforms. This position drives secure configuration management, system hardening, and endpoint security enablement while balancing operational resilience and risk reduction. The role partners across technical teams to maintain consistent security engineering standards and strengthen the organization’s security posture.

How you will make an impact:

• Design, test, and implement endpoint and server security configuration changes through established change control processes.
• Administer, troubleshoot, and maintain endpoint security platforms, including EDR solutions, host-based firewalls, and related security controls.
• Analyze system, endpoint, and security event logs within SIEM platforms to identify risks, trends, control gaps, and improvement opportunities.
• Coordinate investigations and issue resolution activities with vendor support teams for security tools and platforms.
• Execute baseline analysis activities and implement system hardening enhancements aligned with approved security standards.
• Consult with internal teams on security requirements, configuration concerns, and risk-based remediation approaches.
• Track project activities and document security controls, configuration decisions, testing outcomes, and implementation status.

The must haves:

• Experience: 4+ years of cybersecurity, security engineering, infrastructure security, or endpoint/server security experience.
• Must be a US Citizen.
• Application of TCP/IP networking concepts, operating system security concepts, and endpoint/server hardening practices.
• Experience supporting EDR, host-based firewall, SIEM, vulnerability assessment, and configuration baseline tools, including log analysis and troubleshooting.
• Application of security configuration standards and frameworks, including CIS Benchmarks, NIST guidance, Zero Trust, and least privilege principles.
• Demonstrated attention to detail, analytical thinking, and problem-solving skills.
• Ability to work independently and collaboratively across technical teams.
• Application of least privilege and Zero Trust access control principles across endpoint and server environments.

Nice to haves:

• Experience identifying automation opportunities for recurring security tasks and operational efficiency improvements.