Endpoint Security Engineer: Data Loss & Device Control

CMK Resources, Inc.; Milpitas (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

CMK Resources, Inc. seeks a Senior Endpoint Security Engineer to strengthen endpoint data-protection and device-control capabilities for a global technology organization. The role focuses on preventing unauthorized transfer of sensitive IP via USB, removable media, and unsanctioned cloud storage.

This hands-on leadership position will evaluate existing controls, improve policies, and help enforce security across a large Windows and Linux environment.

Qualifications

• Hands-on endpoint-security experience in a large enterprise.
• Experience implementing USB or removable-media controls.
• Experience with Defender for Endpoint and CrowdStrike.
• Experience supporting Windows and Linux endpoints.
• Knowledge of device control, endpoint DLP, and data-egress risks.
• Experience developing policies, exceptions, and phased enforcement plans.
• Ability to balance security requirements with business productivity.

Responsibilities

• Review and improve USB and removable-media security policies.
• Configure device blocking, read-only access, encryption requirements, and allow-listing.
• Design a defensible exception process for legitimate business needs.
• Configure and tune Microsoft Defender Device Control, Purview, and CrowdStrike.
• Help prevent access to unauthorized cloud-storage and file-sharing services.
• Monitor blocked activity, policy violations, and endpoint-security events.
• Coordinate with data-protection teams to align endpoint controls with DLP policies.
• Plan phased policy rollouts and enforcement changes.
• Continuously tune controls to reduce risk without unnecessarily disrupting the business.
• Develop endpoint-security standards, documentation, and reporting.

Skills

Endpoint security

USB controls

Defender for Endpoint

CrowdStrike

Windows endpoints

Linux endpoints

Device control

Endpoint DLP

Data egress risks

Policy development

Enforcement planning

Security–business balance

Tools

Microsoft Defender for Endpoint

CrowdStrike

Microsoft Purview Device Control

Job description

CMK Resources, Inc. seeks a Senior Endpoint Security Engineer to strengthen endpoint data-protection and device-control capabilities for a global technology organization. The role focuses on preventing unauthorized transfer of sensitive IP via USB, removable media, and unsanctioned cloud storage.

This hands-on leadership position will evaluate existing controls, improve policies, and help enforce security across a large Windows and Linux environment.