1. Endpoint Security & EDR Engineering
· Design, deploy, configure, and maintain enterprise endpoint security platforms, including:
o EDR/EPP solutions: Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Trellix/McAfee, Symantec
o Endpoint security controls: AV, host firewall, device control, disk encryption, and vulnerability agents
· Develop endpoint security configuration baselines and ensure consistent policy enforcement across Windows/macOS/Linux devices.
· Manage agent deployment, health monitoring, policy tuning, updates, and lifecycle maintenance using tools such as Intune, SCCM, GPO, or automation scripts.
· Integrate endpoint telemetry with other security platforms for visibility
2. Data Loss Prevention (DLP) – Engineering & Lifecycle Management
· Design, deploy, and maintain enterprise-wide DLP solutions such as (Microsoft Purview DLP (endpoint, cloud, email), Forcepoint DLP, Proofpoint Information & Email Protection, Zscaler / Cisco Umbrella DLP
· Configure DLP policies, detection classifiers, endpoint rules, cloud controls, and data-handling workflows.
· Manage DLP agents, infrastructure components, tuning, upgrades, and operational alignment with compliance/regulatory requirements.
3. Network Detection & Response (NDR) Engineering
· Architect, deploy, configure, and maintain NDR solutions such as: (Corelight, Darktrace, ExtraHop Reveal)
· Configure SPAN/TAP feeds, cloud sensors, routing integrations, and traffic ingestion pipelines.
· Maintain sensor coverage, policy configurations, version upgrades, and performance optimization.
4. File Integrity Monitoring (FIM) – Design, Deployment & Maintenance
· Implement and manage FIM platforms, including: (Tripwire, Qualys FIM, Wazuh, Defender, CrowdStrike)
· Configure monitored directories, change detection rules, baselines, and exclusions.
· Oversee FIM agent deployment, architecture, health, and maintenance across server and endpoint fleets.
5. Automation, Deployment & Platform Operations
· Automate deployment, configuration updates, and system health checks using:
o PowerShell, Python, Bash, API/Graph API
· Perform ongoing platform operations such as patching, upgrading, tuning, and configuration auditing.
· Maintain complete and up-to-date documentation including:
o Standard operating procedures
o Version control and lifecycle plans