Senior Endpoint Security Engineer

Consolidated Edison, Inc.; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Consolidated Edison, Inc. seeks a Senior Endpoint Security Engineer to lead the engineering, implementation, and ongoing improvement of enterprise endpoint security across workstations, servers, and OT endpoints.

You will provide hands-on leadership for AV, EDR, XDR, CASM, vulnerability management, and related controls to protect assets from threats. You will partner with infrastructure, desktop, server, operations, architecture, and cyber defense teams to ensure secure, scalable, and

Responsibilities

• Lead engineering and deployment of endpoint security across workstations, servers and OT.
• Evaluate and integrate AV/EDR/XDR, CASM, vulnerability, and data loss prevention controls.
• Collaborate with infrastructure and cyber defense teams to ensure secure, scalable solutions.

Job description

The Senior Endpoint Security Engineer is a senior technical position responsible for engineering, implementing, managing, and continuously improving enterprise endpoint security solutions across workstation, server, and operational technology endpoint environments.

This role provides hands‑on technical leadership for endpoint security technologies, including antivirus/anti‑malware (AV), endpoint detection and response (EDR), extended detection and response (XDR), cyber asset attack surface management (CASM), vulnerability management, configuration management, device control, application control, data loss prevention, endpoint telemetry, and related security controls that protect company assets from malware, ransomware, unauthorized access, and emerging threats.

The individual will assess, design, test, deploy, and support new endpoint security technologies while partnering with infrastructure, desktop, server, operations, architecture, and cyber defense teams to ensure solutions are secure, scalable, supportable, and aligned with enterprise security standards and business requirements. This role also supports threat hunting and detection engineering by using endpoint telemetry, security events, and threat intelligence to identify suspicious activity, develop detection logic, and improve investigation and response outcomes.