Cyber Security Engineer

Job Description

The Cyber Security Engineer 2 is responsible for supporting and enhancing the organization's endpoint security posture through a combination of security engineering, operational support, and incident response activities. This role focuses on the design, implementation, administration, and day-to-day management of endpoint security technologies, ensuring secure access to corporate resources while protecting systems and data from cyber threats. The engineer will work closely with security, infrastructure, and IT teams to maintain security controls, troubleshoot issues, and continuously improve endpoint protection capabilities.

Job Responsibilities
Design, implement, maintain, and optimize endpoint security solutions and controls to protect corporate devices, applications, and sensitive data.
Perform day-to-day operational support for endpoint security platforms, ensuring system availability, performance, and compliance with security standards.
Provide Level 1 (L1) and operational support for Zscaler services, including user connectivity issues, authentication failures, policy enforcement, web access troubleshooting, and escalation of complex issues.
Support and administer Endpoint Privilege Management (EPM) solutions, including privilege elevation requests, policy management, application control, and endpoint access troubleshooting.
Monitor endpoint security alerts, investigate suspicious activities, and assist in incident response and remediation efforts.
Collaborate with security engineering teams to implement and enhance endpoint security controls, policies, and configurations.
Conduct security assessments and identify vulnerabilities affecting endpoint devices and endpoint security infrastructure.
Support deployment, configuration, and maintenance of endpoint protection technologies such as Endpoint Detection and Response (EDR), antivirus, device control, disk encryption, and privilege management solutions.
Analyze security events using SIEM and endpoint security tools to identify threats and support threat-hunting activities.
Work with IT support, infrastructure, and application teams to resolve endpoint-related security issues and improve user experience while maintaining security compliance.
Develop and maintain operational procedures, technical documentation, and knowledge base articles for endpoint security platforms.
Assist with security audits, compliance initiatives, and remediation activities related to endpoint security controls.
Participate in security projects, upgrades, and technology implementations to improve the overall security posture.
Educate end users and IT teams on endpoint security best practices and security awareness.

Skills
Experience supporting and administering endpoint security technologies and security operations processes.
Knowledge of Endpoint Privilege Management (EPM) platforms such as CyberArk EPM, BeyondTrust, Microsoft Intune EPM, or equivalent solutions.
Experience with SASE Solutions including endpoint DLP and client proxy.
Familiarity with Endpoint Detection and Response (EDR) tools such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or equivalent.
Understanding of endpoint hardening, application control, device management, disk encryption, and least-privilege principles.
Experience with SIEM platforms and security monitoring tools.
Knowledge of networking fundamentals, including TCP/IP, DNS, VPNs, and authentication protocols.
Familiarity with identity and access management concepts, including SSO, MFA, SAML, and OAuth.
Basic scripting and automation skills using PowerShell, Python, or similar technologies.
Strong troubleshooting, analytical, and problem-solving skills.
Ability to communicate technical information effectively to both technical and non-technical stakeholders.

Qualifications
Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related field, or equivalent experience.
2-4 years of experience in cybersecurity, endpoint security, security operations, or security engineering roles.
Experience supporting enterprise endpoint security platforms and day-to-day security operations.
Exposure to cloud security, endpoint protection, vulnerability management, or access management technologies preferred.
Security certifications such as CompTIA Security+, Microsoft Security certifications, Zscaler certifications, or equivalent are a plus.

Notes:
Virtual

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.