Senior Software Engineer
Posted Updated 35
views
Description
Job Summary
- Endpoint Protection: Design, implement, and manage endpoint security solutions (antivirus, EDR, firewalls also understanding into Active Directory, Networking).
- Monitoring Incident Response: Continuously monitor endpoint activity for security incidents; respond to and investigate security breaches.
- Policy Development: Develop and enforce security policies and procedures for endpoint devices.
- Threat Analysis: Conduct threat assessments and vulnerability assessments to identify potential security risks.
- User Training: Provide training and support to employees on best security practices.
- Collaboration: Work closely with IT teams to integrate security into system architecture and operations.
- Reporting: Generate reports on endpoint security status, incidents, and compliance for management.
- A- Minimum required Accountabilities for this role
- B- Additional Accountabilities pertaining to the role
- Engineering / Computer Graduate with 3-5 years of Information / Cyber Security Experience
- Strategic Decisions
- Deciding encryption policies for different device categories (laptops, desktops, servers).
- Define the problem clearly
- Security Audits preparedness
- Deciding compliance enforcement policies for non-compliant or unencrypted devices.
- Managing BitLocker encryption compliance across thousands of enterprise devices.
- Handling BitLocker recovery key management and recovery incidents securely.
- Ensuring endpoint security without impacting user productivity or system performance.
- Handling encryption deployment during OS upgrades and device refresh cycles.
- Maintaining compliance with organizational and regulatory security standards.
- Supporting audit requirements and maintaining accurate security documentation.
- a) Qualifications
- Engineering/Computer Graduates with relevant security experience of 3-5years
- Work Experience
- Experience with endpoint protection and EDR solutions such as Microsoft Defender for Endpoint, Symantec, TrendMicro.
- Monitored and investigated endpoint security alerts using EDR platforms.
- Performed real-time analysis of suspicious processes, files, network connections, and user activities.
- Investigated malware, ransomware, phishing, and other endpoint security incidents.
- Conducted threat hunting across endpoints to identify indicators of compromise (IOCs).
- Analyzed process trees, command-line activity, registry changes, persistence mechanisms, and suspicious behaviors.
- Triaged and prioritized security alerts based on severity, impact, and threat intelligence.
- Contained compromised endpoints by isolating systems and terminating malicious processes.
- Performed root-cause analysis and incident investigation to determine attack vectors.
- Created and maintained detection rules, indicators, exclusions, and prevention policies.
- Used MITRE ATTCK techniques to map and understand attacker behavior.
- Investigated endpoint telemetry and correlated events with SIEM logs for deeper analysis.
- Supported incident response activities including containment, eradication, and recovery.
- Prepared detailed incident reports and documented investigation findings.
- Collaborated with SOC, network, cloud, and IT teams to resolve security incidents.
- Improved detection coverage by identifying gaps and tuning EDR policies to reduce false positives.
- Followed security procedures and escalation processes for critical and high-severity incidents.