Endpoint and Security Platforms Engineer

We are looking for a hands-on Endpoint & Security Platforms Engineer to build and operate the controls that protect our employee devices and server workloads, working across the full lifecycle from deployment and hardening to troubleshooting, automation, and authorized containment.
This is a chance to influence technical decisions that improve protection without disrupting critical services, and to broaden your engineering skills through hands-on work with security platforms and automation. You will work closely with IT, Infrastructure, Cyber Defense, and data security colleagues to make protection reliable and effective without creating unnecessary friction for users or critical systems.

Responsibilities
Deploy and maintain EDR/XDR agents and endpoint protection policies across Windows, Linux, and macOS workstations and production servers, managing the full agent lifecycle: upgrades, policy tuning, exclusions, and controlled rollback
Resolve agent failures, telemetry gaps, policy conflicts, and performance issues. Coordinate deployments with IT, which provides first-line support, and take ownership of complex security cases
Implement risk-based OS hardening baselines together with application and infrastructure owners: test compatibility, prepare rollback steps, and deploy changes safely across production systems
Operate endpoint DLP controls: maintain agents, implement policies agreed with data security colleagues, and reduce unnecessary blocking without weakening protection
Maintain assigned security platforms (e.g. SIEM), including service health, access configuration, updates, storage, backups, and recovery
Monitor telemetry and control health, investigating stale agents, coverage gaps, and unmanaged systems, and drive fixes through automation and improved runbooks
Support Cyber Defense investigations with endpoint expertise and execute approved containment actions, escalating anything that could disrupt production
Automate recurring administration, validation, and reporting tasks using scripts and APIs, and maintain clear documentation for configurations and procedures

Requirements
4+ years of hands-on experience in endpoint security, infrastructure security, system security, or a related security engineering role
Practical experience deploying and operating an enterprise EDR/XDR or endpoint protection platform across a mixed workstation and server environment
Strong Linux administration skills, plus the ability to support and troubleshoot protection on Windows workstations and servers using logs, services, permissions, network connections, and resource usage
Experience introducing security controls into production, including testing, controlled deployment, and rollback
Experience implementing OS hardening and working with native security controls
Understanding of access-control models, least privilege, endpoint telemetry, file-integrity monitoring, and host-isolation techniques
Ability to automate operational work using at least one scripting language such as Python, Bash, or PowerShell
Clear communication with technical colleagues and system owners, reliable documentation, and the ability to follow issues through to a verified result
Upper-Intermediate English

Will be a plus
Experience administering a self-managed Elastic or another SIEM platform
Experience with endpoint DLP solutions or Microsoft Defender
macOS security and device-management tools such as Mosyle, ManageEngine, Ansible, or Puppet
Experience with CIS Benchmarks, DISA STIG, or native OS security controls (SELinux, AppArmor, FileVault, BitLocker, etc.)
Experience supporting a large, distributed fleet of endpoints or servers, ideally in fintech, trading, or another performance-critical environment
Technical education in Information Security, Computer Science, or a related field

We offer
20 paid vacation days per year
10 paid sick leave days per year
Public holidays according to the company’s approved holiday calendar
Medical budget
Remote work
Professional education budget
Language-learning budget
Wellness budget covering gym membership, sports equipment, and related expenses