Endpoint Security Engineer: SentinelOne & Intune Expert

Tetra Tech; Alexandria (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Job summary

Halvik Corp is seeking an experienced SentinelOne Endpoint Security Engineer to administer and optimize EPP/EDR across Windows endpoints. You will deploy agents, manage policies, investigate alerts, and support incident response. The role emphasizes Intune-based configurations and cloud‑enabled management.

The ideal candidate has strong PowerShell automation skills and experience integrating security tools with SIEM/SOAR platforms such as Microsoft Sentinel, Splunk, IBM QRadar, and Cortex XSOAR.

Qualifications

• Bachelor’s degree in a related field required.
• Minimum of three years administering enterprise endpoint security.
• Hands-on experience with SentinelOne EPP and EDR platforms.
• Experience managing Windows 10/11 enterprise environments.
• Experience deploying Microsoft Intune policies and configurations.
• Experience supporting enterprise cybersecurity operations and incident response.

Responsibilities

• Lead deployment, configuration and maintenance of SentinelOne agents and policies.
• Monitor alerts, investigate threats, and coordinate incident response.
• Oversee Microsoft Intune-based endpoint management and policy enforcement.
• Integrate endpoint security with SIEM/SOAR and automation workflows.

Skills

SentinelOne administration

EPP/EDR

PowerShell automation

Microsoft Intune

SIEM/SOAR integrations

API integrations

Windows administration

Incident response

Cybersecurity operations

Azure Active Directory

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science

Tools

SentinelOne EPP/EDR

Microsoft Intune

SIEM/SOAR platforms

Cortex XSOAR

Splunk

IBM QRadar

Microsoft Sentinel

Azure AD

Job description

Halvik Corp is seeking an experienced SentinelOne Endpoint Security Engineer to administer and optimize EPP/EDR across Windows endpoints. You will deploy agents, manage policies, investigate alerts, and support incident response. The role emphasizes Intune-based configurations and cloud‑enabled management.

The ideal candidate has strong PowerShell automation skills and experience integrating security tools with SIEM/SOAR platforms such as Microsoft Sentinel, Splunk, IBM QRadar, and Cortex XSOAR.