Senior Endpoint Security Engineer - Network

Daybright Financial; Irving (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Daybright Financial in Irving, TX, seeks a Security Engineer – Network to design, implement, and operate endpoint security controls protecting employees and servers. This role combines prevention, detection, response, and hardening across Windows, macOS, and Linux environments, collaborating with Security Operations, IT, IAM, and Infrastructure teams.

You will tune EPP/EDR/XDR, reduce false positives with the SOC, develop detection content and playbooks, drive vulnerability remediation, and

Qualifications

• 5-7 years of experience operating enterprise endpoint security controls in production environments.
• Practical understanding of endpoint attack techniques, containment methods, and recovery approaches.
• Working knowledge of endpoint security controls across Windows and macOS environments; Linux exposure is beneficial.
• Experience with endpoint vulnerability remediation and patch governance coordination.
• Familiarity with scripting or automation concepts used in security operations and endpoint administration.
• Ability to communicate technical risk, findings, and recommendations to both technical and non-technical stakeholders.
• Familiarity with security frameworks such as NIST, CIS Controls, or ISO 27001.
• Experience in financial services or another regulated industry preferred.
• Experience with SentinelOne EDR platform preferred.
• Experience with the Microsoft endpoint security stack, including Microsoft Defender preferred.
• Experience integrating endpoint telemetry with SIEM and security operations workflows preferred.
• Experience with threat hunting, detection engineering, or behavior-based detection tuning preferred.
• Experience with device compliance, data protection, and zero-trust endpoint control patterns preferred.
• Relevant certifications or equivalent practical expertise in endpoint security or cybersecurity operations preferred.

Responsibilities

• Administer and tune endpoint protection platforms, including EPP, EDR, and XDR capabilities, to improve coverage and alert quality.
• Work with Daybright's outside Security Operations Center to identify improvements and reduce false positives.
• Build and maintain endpoint detection content, triage workflows, and investigation playbooks.
• Develop and enforce endpoint hardening baselines aligned to business needs and recognized security standards.
• Partner with IT operations to deploy secure endpoint configurations using enterprise device management tooling.
• Monitor endpoint threats and coordinate containment, eradication, and recovery actions for endpoint security events.
• Drive endpoint vulnerability and patch remediation workflows with clear prioritization and SLA tracking.
• Investigate endpoint incidents and perform root cause analysis, including documented corrective and preventive actions.
• Improve endpoint telemetry quality, asset inventory accuracy, and control coverage reporting.
• Support internal and external audits with endpoint security control evidence, process documentation, and control narratives.
• Contribute to endpoint security roadmap planning, tooling evaluations, and automation initiatives

Skills

Endpoint security

Windows/macOS security

Scripting/Automation

Risk communication

Security frameworks

Threat hunting

SIEM integration

Patch governance

Tools

SentinelOne

Microsoft Defender

EDR/XDR

Job description

Daybright Financial in Irving, TX, seeks a Security Engineer – Network to design, implement, and operate endpoint security controls protecting employees and servers. This role combines prevention, detection, response, and hardening across Windows, macOS, and Linux environments, collaborating with Security Operations, IT, IAM, and Infrastructure teams.

You will tune EPP/EDR/XDR, reduce false positives with the SOC, develop detection content and playbooks, drive vulnerability remediation, and