We are seeking an experienced AI Endpoint Security Engineer to design, implement, and maintain endpoint security solutions leveraging Artificial Intelligence (AI), Machine Learning (ML), and advanced threat detection technologies. The ideal candidate will have strong expertise in endpoint detection and response (EDR), extended detection and response (XDR), endpoint protection platforms, AI-driven threat analysis, and automated incident response.
The candidate will work closely with cybersecurity, SOC, threat intelligence, and infrastructure teams to detect, investigate, and mitigate advanced endpoint threats across enterprise environments.
Design, deploy, and manage AI-powered endpoint security solutions across Windows, Linux, and macOS environments.
Implement and maintain EDR/XDR solutions for endpoint monitoring, threat detection, and incident response.
Leverage AI and ML capabilities to identify malware, ransomware, zero-day exploits, and suspicious endpoint behavior.
Develop automated threat detection and response workflows using security orchestration and automation technologies.
Integrate endpoint security platforms with SIEM, SOAR, threat intelligence, and identity security solutions.
Analyze endpoint telemetry, behavioral analytics, process execution, system logs, and network activity to identify potential threats.
Configure endpoint security policies, application control, device control, vulnerability protection, and attack surface reduction.
Investigate security incidents, perform root-cause analysis, and implement remediation measures.
Develop scripts using Python, PowerShell, or Bash to automate endpoint security operations.
Evaluate AI-driven security tools and improve detection accuracy while minimizing false positives.
Support threat hunting, vulnerability management, security assessments, and endpoint compliance initiatives.
Collaborate with security engineering and SOC teams to strengthen enterprise endpoint security posture.
5+ years of experience in cybersecurity, endpoint security, or security engineering.
Hands-on experience with EDR/XDR and endpoint protection platforms.
Knowledge of AI/ML-based threat detection, behavioral analytics, and anomaly detection.
Experience with endpoint security tools such as:
Microsoft Defender for Endpoint
CrowdStrike Falcon
SentinelOne Singularity
Palo Alto Networks Cortex XDR
Trend Micro Apex One
Experience integrating endpoint security tools with SIEM platforms such as Microsoft Sentinel, Splunk, or IBM QRadar.
Strong understanding of malware analysis, ransomware protection, threat hunting, and incident response.
Scripting experience with Python, PowerShell, or Bash.
Knowledge of Windows, Linux, macOS, Active Directory, and endpoint management.
Understanding of MITRE ATT&CK, vulnerability management, and security best practices.
Familiarity with security frameworks such as NIST CSF, CIS Controls, and ISO 27001.
Experience with AI-powered SOC operations and automated incident response.
Knowledge of Generative AI, LLM-based security analytics, or AI-assisted threat investigation.
Experience with SOAR platforms and security automation playbooks.
Familiarity with cloud security across AWS, Microsoft Azure, or Google Cloud.
Experience with endpoint detection rule development and threat intelligence feeds.
Relevant certifications such as CISSP, GCIH, GCED, Security+, SC-200, or vendor-specific EDR certifications.
