Endpoint Security Lead: Defender for Endpoint & Tanium

Blue Origin; Seattle (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

Blue Origin is seeking a Security Engineer for the Endpoint Experience team within Enterprise Technology in Seattle. You will protect and secure endpoints used by engineers, technicians, and business teams, adding impact across the fleet.

Responsibilities include owning Defender for Endpoint coverage across Windows, macOS, Linux, maintaining integrity, and driving vulnerability remediation. You will work with Tanium and other tools to strengthen posture and respond to vendor escalations.

Qualifications

• Experience securing enterprise endpoints.
• Strong knowledge of Defender for Endpoint and Tanium.
• Ability to balance security outcomes with engineering workload.

Responsibilities

• Own endpoint detection and response coverage across the fleet: onboarding/offboarding, agent lifecycle, platform build currency, and tamper protection on Windows, macOS, and Linux.
• Monitor and remediate sensor health, reconciling Defender coverage against inventory to find and fix unmonitored endpoints.
• Manage antivirus and protection policy: scan behavior, definition currency, attack surface reduction rules, exclusions, and platform-specific configuration.
• Write and maintain advanced hunting queries to answer posture and exposure questions.
• Operate diagnostic tooling and drive vendor cases to resolution when platform defects affect the fleet.
• Act on security recommendations and vulnerability findings surfaced by the platform.

Skills

Endpoint security

EDR tooling

Tanium

Windows/macOS/Linux

Threat hunting

Tools

Microsoft Defender for Endpoint

Tanium

Job description

Blue Origin is seeking a Security Engineer for the Endpoint Experience team within Enterprise Technology in Seattle. You will protect and secure endpoints used by engineers, technicians, and business teams, adding impact across the fleet.

Responsibilities include owning Defender for Endpoint coverage across Windows, macOS, Linux, maintaining integrity, and driving vulnerability remediation. You will work with Tanium and other tools to strengthen posture and respond to vendor escalations.