{"id":3678183,"url":"https://alion.io/job/daimler-truck-dtici-csoc-endpoint-security-engineer-t9","title":"DTICI_CSOC_Endpoint Security Engineer_T9","company":{"id":38824,"name":"Daimler Truck","domain":"daimlertruck.com","url":"https://alion.io/company/daimler-truck","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BeeSite","truth_index":{"grade":"B","score":71,"open_postings":286,"ghost_share":0.566,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CAPA","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"closed","first_seen_at":"2026-11-03T12:01:10Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T03:09:23Z","board_verified":false,"closed_at":"2026-11-04T03:09:23Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Tasks\nKey Tasks & Responsibilities:\nInvestigate and respond to endpoint security incidents from detection through containment, remediation, and closure under defined CSOC processes.\n\nPerform in depth incident analysis to determine root cause, scope, severity, and business impact.\n\nMonitor and analyze alerts generated from Microsoft Defender for Endpoint\n\nExecute response actions such as device isolation, file quarantine, attack surface reduction actions, and indicator blocking.\n\nEscalate complex or high-severity endpoint incidents to IR team with structured analysis and supporting evidence.\n\nAnalyze endpoint telemetry including process execution, registry changes, file activity, and network connections.\n\nTune and refine endpoint security alerts, detection rules, and policies to reduce false positives and improve signal quality.\n\nSupport endpoint hardening initiatives including ASR rules, exploit protection, controlled folder access, and device control.\n\nCoordinate with IT teams for vulnerability remediation, patch management, and secure configuration enforcement.\n\nMaintain accurate documentation for incidents, investigations, and response actions.\n\nParticipate in post-incident reviews and RCA sessions, contributing to corrective and preventive actions.\n\nProvide technical guidance and knowledge sharing to L1/L2 SOC analysts on endpoint security topics.\n\nSupport audit, compliance, and internal review activities related to endpoint security operations.\n\n Key Skills:\nStrong hands-on experience with Microsoft Defender for Endpoint (MDE).\n\nWorking knowledge of the Microsoft 365 Defender ecosystem, including Defender for Office 365 and Defender for Identity.\n\nExperience with endpoint detection, response, and remediation in enterprise environments.\n\nFamiliarity with MITRE ATT&CK techniques related to endpoint attacks.\n\nExperience using SIEM platforms such as Microsoft Sentinel for alert correlation and investigation.\n\nAbility to analyze endpoint telemetry and identify malicious or anomalous behavior.\n\nUnderstanding of incident response lifecycle and SOC operations.\n\nBasic exposure to threat intelligence consumption and IOC-based investigations.\n\nSolid understanding of Windows operating systems and endpoint security controls.\n\nKnowledge of endpoint lifecycle management, patching, and vulnerability remediation.\n\nFamiliarity with network concepts relevant to endpoint investigations.\n\nQualifications\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or Engineering (or equivalent experience).\n\n2-4 years of cybersecurity experience, with strong exposure to endpoint security\n\nHands-on enterprise experience with Microsoft Defender for Endpoint is mandatory.\n\nExperience supporting medium-severity security incidents is strongly preferred.","description_format":"text","description_chars":2797,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management","Automotive Manufacturing"],"lifecycle":[{"event":"open","at":"2026-11-03T12:01:10Z"},{"event":"close","at":"2026-11-04T03:09:23Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/daimler-truck-dtici-csoc-endpoint-security-engineer-t9","json_url":"https://alion.io/job/daimler-truck-dtici-csoc-endpoint-security-engineer-t9.json","meta":{"generated_at":"2026-11-05T01:34:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1911,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":38824},"rest":"https://alion.io/mcp/rest/get_company?id=38824"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdaimler-truck-dtici-csoc-endpoint-security-engineer-t9"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdaimler-truck-dtici-csoc-endpoint-security-engineer-t9"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdaimler-truck-dtici-csoc-endpoint-security-engineer-t9"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/daimler-truck-dtici-csoc-endpoint-security-engineer-t9\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdaimler-truck-dtici-csoc-endpoint-security-engineer-t9"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3678183}},{"tool":"search_jobs","arguments":{"company":"daimlertruck.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3678183},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}