Endpoint Security Engineer

Hands-on experience deploying and managing CrowdStrike Falcon, SentinelOne, or comparable XDR platforms within cloud environments.

End-to-End Platform Ownership: Proven responsibility for architecture, implementation, integration, daily operations, troubleshooting, upgrades, and ongoing lifecycle support.

Engineer and tune policies to detect and prevent phishing, business email compromise (BEC), and malicious attachments.

Cloud and Endpoint Ecosystem: Strong experience with AWS, GCP and Azure endpoint-management technologies such as Microsoft Intune, JAMF, SCCM/MECM, or equivalent platforms.

Platform Engineering: Hands-on expertise with agent deployment, policy configuration, version upgrades, performance tuning, exclusion management, troubleshooting, health monitoring, and platform migrations.

Configure and optimize email authentication and protection controls such as SPF, DKIM, and DMARC.

Partner with Security Operations teams to improve detection rules and remediation workflows.

Support attack simulation training campaigns and security awareness initiatives.

Deploy and configure Microsoft Defender for Endpoint capabilities across enterprise endpoints.

Implement and manage endpoint security features including: Endpoint Detection & Response (EDR) Attack Surface Reduction (ASR) rules Web and network protection Device control policies Endpoint vulnerability management

Endpoint Detection & Response (EDR)

Attack Surface Reduction (ASR) rules

Web and network protection

Device control policies

Endpoint vulnerability management

Engineer and maintain endpoint security baselines and hardening standards .

Tune detection rules and alerts to reduce noise while maintaining strong threat coverage.

Assist with investigation and remediation of endpoint security incidents when needed.

Support automation and response workflows using PowerShell and Microsoft security APIs .

Maintain documentation for configurations, engineering standards, and operational procedures.

Collaborate with infrastructure, cloud, and identity teams to implement Zero Trust security controls .

Strong technical problem-solving skills with security mindset

Ability to design and improve security configurations to strengthen the endpoint security.

Detail-oriented with strong documentation practices

Effective collaboration with security operations and infrastructure teams

Ability to balance security with operational usability

At Zelis, we champion diversity, equity, inclusion, and belonging in all aspects of our operations. We embrace the power of diversity and create an environment where people can bring their authentic and best selves to work. We know that a sense of belonging is key not only to your success at Zelis, but also to your ability to bring your best each day.

Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability and require reasonable accommodation with any part of the application and/or interview process, please email talentacquisition@zelis.com .