Associate Security Engineer, Security Control Management

Accountabilities:

• Administer managed EDR platforms across customer environments, including configuration, policy maintenance and tuning, agent lifecycle management, operational controls, and regular platform health checks.
• Execute approved platform changes such as agent upgrades, bulk actions, policy transitions, recovery activities, and migrations while following established change controls, validation procedures, and documentation requirements.
• Monitor endpoint coverage, agent versions, policy alignment, platform health, and operational exceptions, investigating discrepancies and coordinating remediation when needed.
• Support agent deployments, console configuration, integrations, and platform migrations under the guidance of senior engineering staff.
• Investigate endpoint security issues involving agent connectivity, performance, interoperability, policy behavior, detections, exclusions, upgrades, and deployment failures.
• Collect and analyze endpoint, console, and application evidence to determine root causes and distinguish between EDR platform issues, endpoint conditions, and problems involving other security controls.
• Resolve support requests within established procedures and escalate complex, high-risk, or vendor-dependent issues with clear technical findings and complete documentation.
• Work with technology vendors and internal teams to manage support cases, validate remediation approaches, and communicate progress to customer-facing stakeholders.
• Participate in peer reviews of configuration changes, exclusions, and technical recommendations to minimize operational and customer risk.
• Use PowerShell, Python, vendor APIs, and approved automation tools to perform repeatable tasks, collect evidence, and reduce manual operational effort.
• Contribute to scripts, workflows, integrations, dashboards, reports, and health metrics that improve visibility into endpoint coverage, policy compliance, platform status, and recurring issues.
• Identify recurring incidents, failure patterns, and manual processes that can be standardized or automated, while validating automation outputs and maintaining safeguards for large-scale changes.
• Maintain engineering repositories, runbooks, operational checklists, knowledge-base materials, and technical documentation.
• Coordinate assigned operational requests and technical investigations from intake through completion, managing dependencies, status updates, handoffs, documentation, and service expectations.
• Provide practical guidance on EDR configuration, deployment, platform health, and endpoint security operations within the scope of the managed service.
• Participate in customer meetings when technical context is required and communicate findings, risks, dependencies, and next steps in clear business language.
• Develop customer-facing procedures and configuration guidance, and support customer training on routine EDR administration and supported service workflows.
• Build proficiency across CrowdStrike Falcon, SentinelOne, and Microsoft Defender for Endpoint through hands-on experience, vendor training, and knowledge sharing.
• Collaborate with SOC, detection engineering, professional services, customer success, and other operational teams to share troubleshooting findings and improve security operations.

Requirements

• 1+ year of experience in endpoint security, EDR operations, security engineering, systems administration, SOC operations, or a closely related technical role.
• Hands-on experience administering or supporting at least one of the following: CrowdStrike Falcon, SentinelOne Singularity, or Microsoft Defender for Endpoint.
• Practical experience troubleshooting Windows endpoints, with familiarity with macOS or Linux endpoint administration considered beneficial.
• Working knowledge of EDR concepts, endpoint security policies, agent deployment, exclusions, detection triage, and basic endpoint response actions.
• Ability to use PowerShell, Python, command-line tools, or vendor APIs for troubleshooting, evidence collection, and repeatable operational tasks.
• Strong ability to analyze technical evidence, document findings accurately, follow change-management controls, and escalate issues with sufficient context for efficient resolution.
• Clear written and verbal communication skills, with the ability to work effectively with technical teams as well as customer stakeholders.
• Experience in an MSSP, MDR, SOC, or other multi-customer security operations environment is preferred.
• Relevant vendor certifications or training are advantageous, including CrowdStrike CCFA, SentinelOne Certified Administrator or Engineer, Microsoft SC-200, or equivalent practical training.
• Experience with SOAR platforms, SIEM integrations, or security automation tools supporting endpoint security operations is a plus.
• Understanding of MITRE ATT&CK, common endpoint attack techniques, and how EDR telemetry supports detection and investigation is preferred.
• Experience supporting large-scale EDR deployments, platform consolidations, or migrations across heterogeneous enterprise environments is beneficial.
• Familiarity with EDR-native remote response, endpoint querying, hunting, bulk management, and detection validation capabilities is a plus.
• A collaborative, customer-focused, detail-oriented approach, combined with sound judgment and the ability to manage recurring operational work across multiple customer environments.

Benefits

• Annual salary of $75,000–$85,000.
• Flexible Paid Time Off.
• 401(k) with company matching.
• Medical, dental, and vision coverage.
• Voluntary short-term and long-term disability coverage.
• Employee Assistance Program with mental health support.
• Voluntary basic, accidental, and other ancillary life insurance options.
• Health Savings Account contribution when enrolled in the applicable high-deductible health plan.
• 10 paid holidays annually.
• Opportunity to work in a collaborative cybersecurity environment spanning managed detection, endpoint security, threat hunting, security research, and incident response.
• Exposure to leading EDR platforms and opportunities to build broader expertise through structured cross-training and hands-on operational experience.
• Opportunities to develop skills in security automation, platform engineering, customer support, and scalable security operations.
• Collaboration with experienced security professionals across engineering, SOC, detection, professional services, and customer-facing teams.