Endpoint Security Engineer

We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, production servers, and critical infrastructure. You will ensure reliable endpoint visibility, strong security baselines, effective telemetry collection, and containment capabilities across Windows, Linux, and macOS environments. You will work closely with IT, Cyber Defense, IAM, and Compliance teams to maintain measurable endpoint protection coverage and reduce security risks. Responsibilities Deploy, operate, and tune endpoint security controls (EDR/XDR, EPP, MDM) across corporate endpoints, servers, and critical infrastructure Monitor endpoint telemetry health, investigate security events, and identify potential security incidents Implement and maintain OS security baselines and hardening standards across Windows, Linux, and macOS environments based on CIS Benchmarks, DISA STIG, and internal policies Support vulnerability remediation, patching activities, and endpoint security improvements in collaboration with IT and infrastructure teams Configure and maintain endpoint protection capabilities, including file integrity monitoring and endpoint isolation readiness for critical systems Support containment and response activities for compromised or non-compliant devices together with SOC and Cyber Defense teams Assist with tracking endpoint security gaps, remediation actions, and configuration improvements Document endpoint security configurations, operational procedures, and investigation findings Requirements 3+ years of hands-on experience in Endpoint Security, Endpoint Protection, Infrastructure Security, System Security, or a similar cybersecurity role Higher education in Computer Science, Information Security, Software Engineering, or a related technical field is preferred Practical experience securing both desktop endpoints and server workloads in enterprise environments Experience supporting environments with 1,000+ managed endpoints is highly preferred Strong hands-on experience with EDR/XDR, Endpoint Protection Platforms (EPP), and Mobile Device Management (MDM) solutions Deep understanding of Windows, Linux, and macOS architecture, services, processes, logging, and security mechanisms Experience implementing OS hardening based on CIS Benchmarks, DISA STIG, or similar security standards Knowledge of operating system access control models, RBAC, and least-privilege principles Experience with native operating system security features such as Microsoft Defender, Attack Surface Reduction (ASR), BitLocker, SELinux, AppArmor, Gatekeeper, System Integrity Protection (SIP), and FileVault Understanding of endpoint telemetry, file integrity monitoring, and endpoint isolation techniques Scripting skills for automation using PowerShell and Python English - Intermediate\Upper-Intermediate level Ukrainian - Fluent We offer 15 paid vacation days per year 10 paid sick leave days per year Public holidays as per the company’s approved Public holiday list Medical budget Opportunity to work remotely Professional education budget Language learning budget Wellness budget (gym membership, sports gear and related expenses)