Job description

We are looking for a Security Engineer to operate endpoint security tooling based on Microsoft Defender. In this role, you will onboard and maintain endpoints in Defender, tune policies, and report on endpoint security posture. You will escalate to the Security Lead as required. Responsibilities Administer Microsoft Defender for Endpoint: device onboarding, sensor health, exclusions, and policy configuration Configure and tune endpoint protection policies: antivirus, attack surface reduction (ASR), EDR in block mode, and device control Manage security configuration baselines and endpoint hardening across server and client endpoints Report endpoint security posture and coverage (onboarding rate, exposure score, policy compliance) by priority and deadline Maintain endpoint security runbooks, procedures, and incident records in the ITSM platform Participate in security change reviews as part of the change advisory process Requirements 3+ years in security engineering with hands-on EDR experience Microsoft Defender for Endpoint: onboarding, policy management, ASR rules, automated investigation and response Microsoft Defender or Tenable Vulnerability Management or equivalent vulnerability tooling Microsoft Intune / Entra ID: security policy deployment and conditional access (endpoint compliance) Experience with CyberArk EPM Windows and Linux endpoint security (server and client) SIEM familiarity: Cortex Cloud, Microsoft Sentinel, Splunk, or equivalent Scripting: PowerShell and/or Python for automation ITIL foundations: incident and change management Fluency in English (both written and spoken) at a minimum B2 level

Senior Security Engineer (Defender)

Role overview

Summary

Qualifications

Responsibilities

Key facts

Hard skills

Other skills

About the company

Your match analysis

Job description

Related jobs

Other jobs at EPAM Systems

DevOps Team Lead

Senior Manager, Go-to-Market Marketing - Cybersecurity

Senior Security Engineer (Vulnerability Management)