The Job

SME - JAMF

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · DevOps

Join for updates

In short

The L3 Endpoint Security Engineer will act as a Subject Matter Expert for Antivirus, NGAV, and EDR platforms, focusing on solution architecture, advanced threat investigations, and platform optimization. This role involves technical leadership for L1/L2 teams and driving continuous improvement in endpoint security services.

Responsibilities

  • Act as the Subject Matter Expert (SME) for enterprise Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms.
  • Design, implement, administer, and optimize endpoint security solutions across enterprise environments.
  • Lead deployment, migration, upgrade, and integration projects for endpoint security technologies.
  • Define and maintain endpoint security baselines, standards, policies, and governance controls for AV, EDR, Firewall, ASR, Device Control, and Web Protection.
  • Lead investigation and resolution of critical security incidents, malware outbreaks, ransomware attacks, and advanced threats.
  • Perform advanced threat hunting, malware analysis, forensic investigations, and root cause analysis activities.
  • Develop and implement containment, remediation, recovery, and detection enhancement strategies to improve security posture.
  • Review and optimize security policies, exclusions, detections, alerts, and response workflows to improve protection effectiveness and reduce false positives.
  • Act as the highest technical escalation point for complex endpoint security, agent health, onboarding, telemetry, policy, and integration-related issues.
  • Design and support integrations with Microsoft Intune, Active Directory, Entra ID, SIEM platforms, Microsoft Sentinel, Splunk, and SOC monitoring solutions.
  • Drive continuous service improvement initiatives through platform tuning, automation, orchestration, and operational process optimization.
  • Conduct Proof of Concepts (POCs), evaluate emerging endpoint security technologies, and provide strategic recommendations for future security enhancements.
  • Collaborate with SOC, Infrastructure, Cloud, and Endpoint Management teams to strengthen detection, response, and security operations capabilities.
  • Develop and maintain technical documentation, architecture diagrams, SOPs, runbooks, standards, and knowledge base articles.
  • Provide technical leadership, mentoring, training, and knowledge transfer to L1 and L2 engineers.
  • Prepare executive reports, security posture assessments, compliance reports, risk analyses, and strategic recommendations for stakeholders and management.
  • Support audit, compliance, and governance activities while ensuring adherence to organizational security requirements and best practices.

Requirements

  • Must have 8+ years of experience in Endpoint Security and Implementation (MS Defender, SentinelOne, CrowdStrike, JAMF Protect, Zimperium)
  • MS Defender
  • SentinelOne
  • CrowdStrike
  • JAMF Protect
  • Zimperium
  • Defender

Desired Qualifications

  • Experience with Microsoft Intune, Active Directory, Entra ID, SIEM platforms, Microsoft Sentinel, Splunk, and SOC monitoring solutions.
#Endpoint Security#Antivirus#NGAV#EDR#JAMF Protect#MS Defender#SentinelOne#CrowdStrike#Zimperium#Noida
HCLTech Logo

Company

HCLTech

Job Posted

1 month ago

Employment Type

Full Time

WorkMode

On Site

Experience Level

Senior

Locations

Noida, India

Applicants

Be an early applicant