Endpoint & Email Security Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
We are seeking an Endpoint & Email Security Engineer to operate, administer, and optimize endpoint and email security platforms. The role involves monitoring, investigating, and remediating security incidents, managing security policies, and ensuring compliance.
Key Skills for This Role
Responsibilities
- Administer, maintain, and optimize enterprise Endpoint Detection and Response (EDR/XDR) and Endpoint Protection Platform (EPP) solutions
- Monitor endpoint security alerts and investigate suspicious activities
- Perform malware analysis and coordinate endpoint containment, eradication, and recovery activities
- Manage endpoint security policies, including antivirus, device control, application control, host firewall, and endpoint hardening
- Administer and maintain enterprise email security platforms and secure email gateways
- Monitor, investigate, and remediate phishing, spam, malware, business email compromise (BEC), spoofing, and impersonation attacks
- Manage email filtering, quarantine policies, and threat protection rules
- Support implementation and monitoring of SPF, DKIM, and DMARC
- Investigate endpoint and email security incidents in accordance with incident response procedures
- Perform configuration, maintenance, and upgrades of endpoint and email security platforms
- Tune detection rules and security policies to improve threat detection and reduce false positives
- Produce operational reports and dashboards on endpoint and email security performance
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field
- 3–5 years of experience in endpoint security, email security, or security operations
- Experience administering enterprise endpoint protection and email security solutions
- Strong understanding of malware, phishing, ransomware, and endpoint attack techniques
- Experience investigating and remediating endpoint and email security incidents
- Proficiency with endpoint security tools such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, etc.
- Proficiency with email security tools such as Microsoft Defender for Office 365, Proofpoint, Mimecast, etc.
- Familiarity with SIEM, SOAR, and Microsoft 365 Security
- Preferred certifications: Microsoft SC 200, MD 102, MS 102, CompTIA Security+, CEH, GIAC GSEC or GCIH
Full Job Posting
Job Summary
- The Endpoint & Email Security Engineer is responsible for the day to day operation, administration, and optimization of the organization's endpoint and email security platforms.
- The primary focus is to protect corporate endpoints and email services from cyber threats through continuous monitoring, policy management, incident investigation, and remediation.
- The engineer will work closely with the SOC, Infrastructure, Messaging, Identity, and End User Computing teams.
Endpoint Security Operations
- Administer, maintain, and optimize enterprise Endpoint Detection and Response (EDR/XDR) and Endpoint Protection Platform (EPP) solutions.
- Monitor endpoint security alerts and investigate suspicious activities.
- Perform malware analysis and coordinate endpoint containment, eradication, and recovery activities.
- Isolate compromised endpoints and execute remediation procedures.
- Ensure endpoint protection agents are deployed, healthy, and up to date across the enterprise.
- Manage endpoint security policies, including antivirus, device control, application control, host firewall, and endpoint hardening.
- Investigate endpoint security incidents and perform root cause analysis.
- Coordinate remediation activities with Desktop Support and Infrastructure teams.
- Monitor endpoint compliance and resolve agent health or deployment issues.
- Support operating system and endpoint security hardening initiatives.
Email Security Operations
- Administer and maintain enterprise email security platforms and secure email gateways.
- Monitor, investigate, and remediate phishing, spam, malware, business email compromise (BEC), spoofing, and impersonation attacks.
- Analyze suspicious emails, attachments, URLs, and email headers.
- Remove malicious emails from user mailboxes using enterprise security tools.
- Manage email filtering, quarantine policies, and threat protection rules.
- Support the implementation and monitoring of SPF, DKIM, and DMARC.
- Review and optimize email security policies to improve detection accuracy while minimizing false positives.
- Coordinate phishing campaign remediation and provide technical support for security awareness initiatives.
- Collaborate with Messaging and Microsoft 365 administrators to improve email security posture.
Incident Response & Remediation
- Investigate endpoint and email security incidents in accordance with incident response procedures.
- Execute containment, eradication, and recovery activities.
- Document findings, evidence, and remediation actions.
- Escalate complex incidents to senior security engineers or the SOC as appropriate.
- Participate in post incident reviews and recommend improvements to prevent recurrence.
- Maintain incident response playbooks related to endpoint and email security.
Platform Administration
- Perform configuration, maintenance, and upgrades of endpoint and email security platforms.
- Monitor platform availability, performance, and operational health.
- Ensure integration with SIEM, SOAR, Identity, and IT Service Management (ITSM) platforms.
- Support onboarding of new users, devices, and business units.
- Troubleshoot operational issues affecting security tools and services.
- Maintain platform documentation and standard operating procedures.
Threat Prevention & Continuous Improvement
- Tune detection rules and security policies to improve threat detection and reduce false positives.
- Monitor emerging threats targeting endpoints and email systems.
- Develop and implement new detection use cases based on threat intelligence.
- Participate in proactive threat hunting activities related to endpoint compromise and phishing campaigns.
- Recommend enhancements to endpoint and email security controls and processes.
- Support automation initiatives to improve operational efficiency and response times.
Reporting & Compliance
- Produce operational reports and dashboards on endpoint and email security performance.
- Track remediation activities and compliance with defined service level agreements (SLAs).
- Support internal and external security audits.
- Ensure endpoint and email security controls comply with organizational policies and regulatory requirements.
- Maintain accurate documentation of security configurations, incidents, and operational procedures.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- 3–5 years of experience in endpoint security, email security, or security operations.
- Experience administering enterprise endpoint protection and email security solutions.
- Strong understanding of malware, phishing, ransomware, and endpoint attack techniques.
- Experience investigating and remediating endpoint and email security incidents.
Technical Skills Endpoint Security
- Microsoft Defender for Endpoint
- CrowdStrike Falcon
- SentinelOne
- Trend Micro Vision One
- Trellix (McAfee)
- Sophos Intercept X
- VMware Carbon Black
- Elastic Defend
- Endpoint Detection and Response (EDR/XDR)
- Endpoint Protection Platforms (EPP)
- Next Generation Antivirus (NGAV)
Technical Skills Email Security
- Microsoft Defender for Office 365
- Exchange Online Protection (EOP)
- Proofpoint
- Mimecast
- Cisco Secure Email
- Barracuda Email Protection
- Google Workspace Security
- DMARC
- DKIM
- SPF
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Acuative Middle East
Power BI Developer
Jeddah, KSA
Acuative Middle East is seeking a highly skilled Power BI Developer to design, develop, and maintain enterprise reporting and BI solutions. The role requires strong experience in Power BI, SQL, data visualization, report
Network Security Architect
Jeddah, KSA
Acuative Middle East is hiring a Network Security Architect to administer, operate, and improve network and infrastructure security. The role focuses on firewalls, IPS, secure connectivity, and enterprise security infras
Compliance Manager
Jeddah, KSA
Acuative Middle East seeks a Compliance Manager (GRC Lead) to lead cybersecurity governance, risk management, and compliance. The role requires expertise in NCA ECC, NIST CSF, ISO 27001, and ICAO standards, with at least
Senior Security Architect
Jeddah, KSA
Acuative Middle East seeks a Senior Security Architect to define and advance cybersecurity architecture across enterprise, cloud, network, and application environments. The role leads secure design reviews, Zero Trust Ar
Senior Security Architect
Jeddah, KSA
Acuative Middle East seeks a Security Architecture & GRC Lead to lead security architecture and governance initiatives. The role defines security standards, conducts secure design reviews, drives Zero Trust, and ensures
Risk & Governance Analyst
Jeddah, KSA
Acuative Middle East is seeking a Risk & Governance Analyst to support its cybersecurity GRC program in Jeddah. The role involves managing the risk register, conducting control assessments, and supporting compliance with
Security Operations Manager
Jeddah, KSA
Acuative Middle East seeks a Security Operations Lead to manage the SOC, oversee security analysts, and drive incident response. The role requires 7+ years of cybersecurity experience with at least 3 years in a senior SO
Power BI Developer
Jeddah, KSA
Acuative Middle East seeks a Power BI Developer to design, develop, and maintain enterprise reporting and BI solutions. The role requires strong experience in Power BI, SQL, data visualization, and Python scripting, with
Power BI Developer
Jeddah, KSA
Network Security Architect
Jeddah, KSA
Compliance Manager
Jeddah, KSA
Senior Security Architect
Jeddah, KSA
Senior Security Architect
Jeddah, KSA
Risk & Governance Analyst
Jeddah, KSA
Security Operations Manager
Jeddah, KSA
Power BI Developer
Jeddah, KSA