Endpoint Security Engineer

Endpoint Security Engineer

Location: 100% Remote, United States

Type: Contract-to-Hire

Pay Rate: $50–$55/hr W2

Overview

We are seeking an Endpoint Security Engineer to support the administration, monitoring, optimization, and ongoing security of enterprise endpoint protection and patch management platforms.

This is a hands-on engineering role focused on XDR/EDR operations, endpoint management, patch compliance, vulnerability remediation, and Tier 3 systems support across a distributed enterprise environment. The ideal candidate brings strong experience supporting Windows, macOS, and Linux endpoints at scale, along with direct experience using SentinelOne, Tanium, or comparable endpoint security and patch management platforms.

This role is 100% remote and structured as a contract-to-hire opportunity.

Key Responsibilities

XDR / EDR Security Operations

• Administer, maintain, and optimize enterprise XDR/EDR platforms such as SentinelOne or equivalent tools

• Deploy, upgrade, and troubleshoot endpoint agents across Windows, macOS, Linux, servers, and modern infrastructure environments

• Monitor platform health, security events, compliance status, and endpoint coverage

• Investigate alerts and support incident response, containment, remediation, and post-incident follow-up

• Tune policies, reduce alert noise, and improve detection and response workflows

• Evaluate and leverage AI-enabled security capabilities to improve proactive threat detection and automated response

Patch Management & Vulnerability Remediation

• Own the endpoint patching lifecycle using Tanium or equivalent patch management tools

• Support patch assessment, testing, deployment, verification, reporting, and exception management

• Track endpoint compliance, application inventory, vulnerability exposure, and remediation status

• Coordinate patching activities with infrastructure, security, and business teams to minimize operational disruption

• Support rapid response to zero-day vulnerabilities, high-risk CVEs, and urgent remediation efforts

• Produce reporting for patch compliance, remediation progress, and endpoint risk posture

Systems Engineering & Endpoint Support

• Provide enterprise-scale systems administration support across Windows, macOS, and Linux environments

• Serve as a Tier 3 escalation point for endpoint, agent, patching, and security platform issues

• Troubleshoot performance, reliability, compliance, and configuration issues across endpoint environments

• Support endpoint security requirements across servers, cloud workloads, SaaS platforms, and Kubernetes environments

• Manage vendor escalations and coordinate with platform support teams as needed

Automation, Documentation & Process Improvement

• Develop automation scripts using PowerShell, Python, Bash, or similar tools to streamline endpoint and security operations

• Create and maintain runbooks, SOPs, troubleshooting guides, and technical documentation

• Identify opportunities to improve operational efficiency, endpoint visibility, patch reliability, and security response

• Mentor junior team members and share best practices across endpoint security and systems engineering functions

• Participate in on-call rotation as required

Required Qualifications

• 3–5+ years of enterprise experience in endpoint security, systems engineering, endpoint management, or security operations

• Hands-on experience with SentinelOne or comparable EDR/XDR platforms

• Strong experience with Tanium or comparable patch management and vulnerability remediation tools

• Experience managing Windows, macOS, and Linux endpoints at enterprise scale

• Strong understanding of endpoint protection, agent deployment, policy tuning, alert investigation, and remediation workflows

• Experience with patch lifecycle management, compliance reporting, zero-day response, and CVE remediation

• Scripting experience with PowerShell, Python, Bash, or similar automation tools

• Ability to troubleshoot complex endpoint, system, security, and platform issues

• Strong documentation, communication, and cross-functional collaboration skills

Preferred Qualifications

• Experience with Microsoft Entra ID, Microsoft 365, SaaS administration, or identity-integrated endpoint environments

• Exposure to cloud infrastructure, Kubernetes, containers, or modern distributed workloads

• Familiarity with AI-enabled security tools, automated response, or advanced threat detection capabilities

• CompTIA Security+, Network+, or similar certifications preferred

• SentinelOne, Tanium, Microsoft Azure, or cloud security certifications are a plus

• Agile, DevOps, or automation-driven operations experience preferred