Senior Endpoint Security Engineer – Carbon Black & Symantec

• 6–10 years of experience in information security or endpoint engineering roles.
• Expert-level experience with VMware Carbon Black (App Control, EDR, Cloud) including advanced policy design, incident response, and console administration.
• Expert-level experience with Symantec endpoint security platforms (SEP, SES, Symantec EDR, content policy tuning).
• Strong understanding of endpoint forensics, malware analysis fundamentals, and attacker tradecraft.
• Proficiency with Windows, macOS, and/or Linux endpoint internals and event logging.
• Demonstrated experience integrating endpoint data with SIEM/SOAR platforms.
• Ability to lead complex troubleshooting involving OS, network, and security layers.
• Strong documentation, communication, and technical leadership abilities.

• Experience designing enterprise security architectures or zero-trust endpoint models.
• Significant experience in environments with 5,000+ endpoints.
• Development or automation experience with PowerShell, Python, Bash, or REST APIs.
• Experience with threat modeling, purple teaming, or incident response leadership.
• Certifications such as CBCA, CBCM, Symantec/Broadcom certifications, GSEC, GCED, GCIA, GCFA, or similar.

• Strong ownership mindset with the ability to drive outcomes with minimal oversight.
• Capable of leading cross-functional initiatives involving SOC, IT, cloud engineering, and compliance teams.
• High judgment and ability to balance business, operational, and security requirements.
• Able to communicate complex technical concepts to executives and non-technical stakeholders.
• Mentors others, raises team maturity, and establishes engineering best practices.

Hiring Assumptions: Potential Start date - January 1, 2026