Senior Endpoint Security Engineer

CMK Resources, Inc.; Milpitas (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

CMK Resources, Inc. seeks a Senior Endpoint Security Engineer to strengthen endpoint data-protection and device-control capabilities for a global technology organization. The role focuses on preventing unauthorized transfer of sensitive IP via USB, removable media, and unsanctioned cloud storage.

This hands-on leadership position will evaluate existing controls, improve policies, and help enforce security across a large Windows and Linux environment.

Qualifications

• Hands-on endpoint-security experience in a large enterprise.
• Experience implementing USB or removable-media controls.
• Experience with Defender for Endpoint and CrowdStrike.
• Experience supporting Windows and Linux endpoints.
• Knowledge of device control, endpoint DLP, and data-egress risks.
• Experience developing policies, exceptions, and phased enforcement plans.
• Ability to balance security requirements with business productivity.

Responsibilities

• Review and improve USB and removable-media security policies.
• Configure device blocking, read-only access, encryption requirements, and allow-listing.
• Design a defensible exception process for legitimate business needs.
• Configure and tune Microsoft Defender Device Control, Purview, and CrowdStrike.
• Help prevent access to unauthorized cloud-storage and file-sharing services.
• Monitor blocked activity, policy violations, and endpoint-security events.
• Coordinate with data-protection teams to align endpoint controls with DLP policies.
• Plan phased policy rollouts and enforcement changes.
• Continuously tune controls to reduce risk without unnecessarily disrupting the business.
• Develop endpoint-security standards, documentation, and reporting.

Skills

Endpoint security

USB controls

Defender for Endpoint

CrowdStrike

Windows endpoints

Linux endpoints

Device control

Endpoint DLP

Data egress risks

Policy development

Enforcement planning

Security–business balance

Tools

Microsoft Defender for Endpoint

CrowdStrike

Microsoft Purview Device Control

Job description

CMK Resources is seeking a Senior Endpoint Security Engineer to strengthen endpoint data-protection and device-control capabilities for a global technology organization. The primary focus is preventing the unauthorized transfer of sensitive intellectual property through USB devices, removable media, and unsanctioned cloud-storage services.

This is a hands-on technical leadership role with no direct reports. The person will evaluate existing controls, improve policies, and help operationalize enforcement across a large Windows and Linux environment.

Location

Milpitas, CA or Irvine, CA – onsite four days per wee

Responsibilities

• Review and improve USB and removable-media security policies
• Configure device blocking, read-only access, encryption requirements, and allow-listing
• Design a defensible exception process for legitimate business needs
• Configure and tune Microsoft Defender Device Control, Purview, and CrowdStrike
• Help prevent access to unauthorized cloud-storage and file-sharing services
• Monitor blocked activity, policy violations, and endpoint-security events
• Coordinate with data-protection teams to align endpoint controls with DLP policies
• Plan phased policy rollouts and enforcement changes
• Continuously tune controls to reduce risk without unnecessarily disrupting the business
• Develop endpoint-security standards, documentation, and reporting

Required Qualifications

• Hands-on endpoint-security experience in a large enterprise
• Experience implementing USB or removable-media controls
• Experience with Microsoft Defender for Endpoint, CrowdStrike, or comparable tools
• Experience supporting Windows and Linux endpoints
• Knowledge of device control, endpoint DLP, and data-egress risks
• Experience developing policies, exceptions, and phased enforcement plans
• Ability to balance security requirements with business productivity

Preferred Qualifications

• Microsoft Purview Device Control experience
• Experience protecting intellectual property or sensitive technical data
• Semiconductor, manufacturing, engineering, or technology-industry experience
• CASB or SSE experience
• Experience controlling unsanctioned cloud-storage services