Associate Security Engineer, Security Control Management

At Cyber Maxx, we believe it is our duty to defend against those committed to wide-scale societal disruption through cyberattacks.

At Cyber Maxx, we believe it is our duty to defend against those committed to wide-scale societal disruption through cyberattacks. We help our customers reduce risk by tightly integrating MDR with offensive security, threat hunting, security research, and digital forensics and incident response (DFIR) to continually adapt to new and evolving threats. Our modern MDR (Managed Detection & Response) approach is tailored to the unique characteristics and risk factors of each customer, enabling us to take full ownership of the response process and, optionally, manage key security controls.

By thinking like an adversary and defending like a guardian, we help our customers stay a step ahead of threat actors. At Cyber Maxx, we value humility, transparency, intellectual curiosity, and a customer first approach. Cyber Maxx is seeking an Associate Security Engineer to join our Security Control Management team with a primary focus on Endpoint Detection and Response (EDR) platform operations.

This individual contributor role supports the day-to-day delivery of Cyber Maxx's managed EDR service across a diverse customer base. In this role, you will configure, maintain, and troubleshoot endpoint security platforms in multi-tenant customer environments. The position requires a team-oriented, client-facing mindset and the ability to work effectively with both technical and non-technical stakeholders. You will follow established engineering standards, execute operational requests, investigate platform health and agent issues, and document work clearly.

You will work closely with senior engineers, the SOC, detection engineering, professional services, and customer-facing teams. The team supports Crowd Strike Falcon, Sentinel One, and Microsoft Defender for Endpoint. Prior experience with at least one platform is expected; structured cross-training will be provided to build working proficiency across the supported portfolio. Success in this role requires sound troubleshooting, careful change execution, clear communication, and the ability to manage repeatable work across multiple customer environments.

EDR Platform Operations:

• Administer Cyber Maxx-managed EDR platforms across customer environments, including routine configuration, policy maintenance and tuning, agent lifecycle activities, operational controls, and platform health checks.
• Execute approved routine and large-scale platform changes—including agent upgrades, bulk actions, policy transitions, and recovery activities—using established change controls, validation procedures, and documentation requirements; elevate unexpected behavior or risk.
• Monitor platform health, agent coverage, version status, policy alignment, and operational exceptions; investigate discrepancies and coordinate remediation.
• Support agent deployment, console configuration, integrations, and platform migrations under the direction of senior engineering staff.
• Monitor vendor roadmaps, emerging capabilities, and industry developments across supported EDR platforms, and contribute findings and recommendations regarding potential changes to internal standards for senior engineering review.

• Investigate endpoint security issues involving agent connectivity, performance, interoperability, policy behavior, detections, exclusions, upgrades, and deployment failures.
• Collect and analyze endpoint, console, and application evidence to isolate likely causes and determine whether an issue is related to the EDR platform, endpoint conditions, or another security control.
• Resolve requests within defined procedures and escalate complex, high-risk, or vendor-dependent issues with complete technical findings and a clear record of actions taken.
• Work with vendors and internal teams to progress support cases, validate proposed remediations, and communicate status to customer-facing stakeholders.
• Participate in peer review of configuration changes, exclusions, and technical recommendations to reduce operational and customer risk.

• Use Power Shell, Python, vendor APIs, or approved automation tooling to perform repeatable operational tasks, collect evidence, and reduce manual effort.
• Contribute to scripts, workflows, and platform integrations developed by the Security Control Management team, including testing, documentation, and…