Endpoint Security Engineer

Endpoint Security Engineer – Hybrid in Charlotte, NC (4 days onsite / 1 day remote)

Duration: 06+ months. Interview onsite.

We are seeking a highly skilled Endpoint Security Engineer to design, implement, and maintain enterprise endpoint security solutions across a large-scale environment. This role is heavily focused on hands‑on Tanium engineering, requiring deep experience configuring, tuning, and optimizing Tanium modules—not just monitoring or utilizing existing deployments. This is an opportunity to join a collaborative, high‑performing team responsible for securing thousands of endpoints and driving continuous improvement across endpoint detection, response, and vulnerability management.

• Engineer & optimize endpoint security solutions design, build, implement, and maintain endpoint security tools, with a strong focus on Tanium platform engineering.
• Tanium Platform Ownership.
• Configure, tune, and manage Tanium modules including Comply Plus, Core Platform, Deploy, Discover, Enforce, Integrity Monitor, Patch, Performance, Threat Response.
• Patch & Vulnerability Management:
  Automate and manage OS and third‑party patching across a large enterprise environment to proactively remediate vulnerabilities.
• Endpoint Detection & Response (EDR):
  Deploy and maintain tools such as Crowd Strike, ensuring proper configuration and response workflows.
• Incident Response & Forensics:
  Investigate endpoint security incidents, isolate affected systems, and perform root cause analysis to prevent recurrence.
• Security Policy & Controls:
  Develop and enforce endpoint security policies including MFA, device controls, and user access standards.
• Telemetry & Threat Analysis:
  Correlate endpoint and log data (e.g., via Splunk) to identify complex attack patterns and security risks.
• Automation & Scripting:
  Build scripts using Power Shell, Python, or Bash to streamline deployments, remediation actions, and monitoring.

• Proven experience as an Endpoint Security Engineer in a large enterprise environment.
• Hands‑on Tanium engineering experience (must have built, configured, and maintained—not just used).
• Expertise across multiple Tanium modules listed above.
• Strong knowledge of Windows and Linux operating systems.
• Experience with Crowd Strike (EDR), Splunk (log analysis / SIEM), and Cyber Ark (privileged access management).
• Experience supporting large endpoint environments (thousands of devices).

• Certifications such as CISSP, CompTIA Security+, or similar.
• Strong background in automation and security tooling optimization.