Endpoint Security Analyst

Reports To

Director, Ai and Information Security

ChargePoint is seeking a Junior Endpoint Security Analyst to own and advance our endpoint security programme. This is a hands-on security engineering role focused on protecting corporate assets through EDR, DLP, and insider threat detection and response. You will be responsible for the full lifecycle of endpoint security tooling: deployment, policy management, alert triage, threat hunting, and continuous improvement. 

What You Will Be Doing

• Support threat detection and response efforts by assisting in building detection logic, investigating alerts, and participating in incident response activities under the guidance of senior team members.
• Assist in managing the enterprise Data Loss Prevention (DLP) programme — help monitor DLP alerts, investigate potential policy violations, and coordinate with stakeholders on remediation steps.
• Support the day-to-day operations of the enterprise EDR platform, including assisting with deployment, policy configuration, and tuning across Windows, macOS, and Linux endpoints.
• Contribute to developing new detection use cases and monitoring strategies for endpoint-based threats, working with telemetry from EDR, DLP, UEBA, and other endpoint security tools.
• Triage and investigate endpoint security alerts, perform initial root cause analysis, and escalate complex incidents with recommended containment actions.
• Participate in proactive threat hunting exercises across endpoint telemetry to help identify advanced threats and attacker techniques.
• Collaborate with SOC, threat intelligence, and incident response teams to share endpoint findings and support broader security investigations.
• Stay current on emerging endpoint security technologies and contribute recommendations for improving the organization's security posture.
• Help develop and maintain runbooks, standard operating procedures, and documentation for endpoint security operations.
• Assist in producing metrics, dashboards, and reports on endpoint security posture and alert trends.
• Work alongside IT and infrastructure teams to support endpoint hardening and secure deployment practices.

What You Will Bring to ChargePoint

• 2+ year of experience in information security, including internships or relevant project work.
• Foundational hands-on experience with at least one enterprise EDR platform (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black).
• Basic understanding of DLP concepts and exposure to enterprise DLP solutions (e.g., Microsoft Purview, Symantec DLP).
• Awareness of insider threat detection concepts, including basic familiarity with UEBA tools and behavioural analytics.
• Ability to write or modify basic detection rules and understand correlation logic for endpoint-based threats.
• Understanding of endpoint fundamentals, OS internals (Windows, macOS, or Linux), and common attack surface reduction techniques.
• Familiarity with the MITRE ATT&CK framework and how it applies to endpoint threat detection.
• Basic scripting skills in at least one language (Python, PowerShell, or Bash) with a willingness to build automation over time.
• Strong analytical and problem-solving skills with attention to detail and eagerness to learn in a fast-paced environment.
• Good written and verbal communication skills with the ability to document findings clearly.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.

Good to Have

• Exposure to SOAR platforms or security automation concepts.
• Basic understanding of Zero Trust architecture principles and their application to endpoint security.
• Any relevant certifications such as CompTIA Security+, CEH, or progress toward GCIH, GCFE, or similar.
• Familiarity with cloud environments (AWS, Azure, or GCP) and how endpoint security applies in cloud-first or hybrid setups.
• Awareness of user onboarding/offboarding processes and the security controls involved.
• Interest in or exposure to the EV, automotive, or critical infrastructure industry.

Location

Gurgaon/Remote