Senior Security Engineer (Defender)

We are looking for a Security Engineer to operate endpoint security tooling based on Microsoft Defender. In this role, you will onboard and maintain endpoints in Defender, tune policies, and report on endpoint security posture. You will escalate to the Security Lead as required.

Responsibilities

• Administer Microsoft Defender for Endpoint: device onboarding, sensor health, exclusions, and policy configuration
• Configure and tune endpoint protection policies: antivirus, attack surface reduction (ASR), EDR in block mode, and device control
• Manage security configuration baselines and endpoint hardening across server and client endpoints
• Report endpoint security posture and coverage (onboarding rate, exposure score, policy compliance) by priority and deadline
• Maintain endpoint security runbooks, procedures, and incident records in the ITSM platform
• Participate in security change reviews as part of the change advisory process

Requirements

• 3+ years in security engineering with hands-on EDR experience
• Microsoft Defender for Endpoint: onboarding, policy management, ASR rules, automated investigation and response
• Microsoft Defender or Tenable Vulnerability Management or equivalent vulnerability tooling
• Microsoft Intune / Entra ID: security policy deployment and conditional access (endpoint compliance)
• Experience with CyberArk EPM
• Windows and Linux endpoint security (server and client)
• SIEM familiarity: Cortex Cloud, Microsoft Sentinel, Splunk, or equivalent
• Scripting: PowerShell and/or Python for automation
• ITIL foundations: incident and change management
• Fluency in English (both written and spoken) at a minimum B2 level

Benefits

• Opportunity to work in a fast-paced, agile, software engineering culture
• Comfortable modern office in Prague 7, with support of hybrid or fully remote mode
• Benefit program (5 weeks of vacation, paid sick days, paid days off for special occasions, meal vouchers, flexi pass, Prague city public transport annual coupon, multisport cards, optional contribution to pension fund, health insurance for family member)
• EPAM Employee Stock Purchase Plan (ESPP) (subject to certain eligibility requirements)
• English language courses
• Czech language courses upon request
• Referral bonuses for recommended candidates
• Mobile Phone Tariff’s program for managerial-level candidates
• Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more