Back to SearchSenior Security Engineer (Defender)
Remote in Czech Republic
Security.Engineering
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
We are looking for a Security Engineer to operate endpoint security tooling based on Microsoft Defender. In this role, you will onboard and maintain endpoints in Defender, tune policies, and report on endpoint security posture. You will escalate to the Security Lead as required.
Responsibilities
- Administer Microsoft Defender for Endpoint: device onboarding, sensor health, exclusions, and policy configuration
- Configure and tune endpoint protection policies: antivirus, attack surface reduction (ASR), EDR in block mode, and device control
- Manage security configuration baselines and endpoint hardening across server and client endpoints
- Report endpoint security posture and coverage (onboarding rate, exposure score, policy compliance) by priority and deadline
- Maintain endpoint security runbooks, procedures, and incident records in the ITSM platform
- Participate in security change reviews as part of the change advisory process
Requirements
- 3+ years in security engineering with hands-on EDR experience
- Microsoft Defender for Endpoint: onboarding, policy management, ASR rules, automated investigation and response
- Microsoft Defender or Tenable Vulnerability Management or equivalent vulnerability tooling
- Microsoft Intune / Entra ID: security policy deployment and conditional access (endpoint compliance)
- Experience with CyberArk EPM
- Windows and Linux endpoint security (server and client)
- SIEM familiarity: Cortex Cloud, Microsoft Sentinel, Splunk, or equivalent
- Scripting: PowerShell and/or Python for automation
- ITIL foundations: incident and change management
- Fluency in English (both written and spoken) at a minimum B2 level