Endpoint Security Engineer
First seen by Alion on Oct 1, 2026.
This is a platform ownership role, responsible for maintaining endpoint security tool health, policy compliance, platform currency, and complete asset coverage rather than a purely monitoring-focused position.
Key Responsibilities
Endpoint Security - EDR / EPP
- Deploy, configure, and maintain EDR/EPP agents across servers and workstations.
- Administer endpoint security platforms such as Kaspersky Endpoint Security, Kaspersky EDR, CrowdStrike, and Microsoft Endpoint Protection.
- Manage Kaspersky Security Center (KSC/KSCA), including policy deployment, agent management, task scheduling, and reporting.
- Configure and tune endpoint security policies, including:
- Detection and prevention policies
- Application control
- Device control
- Web and mail filtering
- Monitor endpoint coverage and agent health, identifying unmanaged, inactive, or offline endpoints.
- Ensure endpoint security policies remain current and consistently applied across the environment.
- Coordinate with the SOC team on detection-rule tuning and false-positive reduction.
- Manage platform upgrades, patch cycles, version updates, and vendor escalations.
- Produce regular reports covering endpoint coverage, platform health, policy compliance, and security posture.
Platform Ownership & Operations
- Maintain SOPs, operational procedures, and runbooks for assigned cybersecurity platforms.
- Participate in formal change management processes, including submission, review, testing, and implementation of change requests.
- Coordinate with cybersecurity vendors for technical support, escalations, renewals, and product roadmap updates.
- Support incident response activities related to endpoint security platforms.
- Troubleshoot platform, agent, connectivity, and policy-related issues.
- Work with infrastructure, server, network, and SOC teams to maintain reliable endpoint security coverage.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
- 3-5 years of experience in Cybersecurity Infrastructure, Endpoint Security, or a related technical security role.
- Strong hands-on experience with EDR and EPP technologies.
- Practical experience with Kaspersky Endpoint Security and Kaspersky EDR, preferably Expert or Optimum tiers.
- Hands-on experience managing Kaspersky Security Center (KSC/KSCA).
- Experience with policy deployment, endpoint agent management, health monitoring, and security reporting.
- Good administration knowledge of Windows Server and Linux environments.
- Good understanding of firewalls, proxies, network segmentation, and endpoint-security connectivity requirements.
- Strong troubleshooting, documentation, and technical problem-solving skills.
- Ability to work effectively with SOC, infrastructure, networking, and vendor teams.
Preferred Technical Experience
- Kaspersky Endpoint Security / Kaspersky EDR
- Kaspersky Security Center (KSC/KSCA)
- CrowdStrike
- Microsoft Endpoint Protection
- EDR/EPP Policy Management
- Windows & Linux Administration
- Endpoint Agent Deployment
- Security Policy Compliance
- Change Management
- Incident Response Support