Defender for Cloud Engineer

What You'll Do

• Serve as a dedicated, named Resident Engineer embedded within OpenKyber customer environments
• Lead and support Vision One XDR deployments - from initial setup through ongoing optimization and expansion
• Configure and tune Vision One security modules: Endpoint Security, XDR, Workload Security, Intrusion Prevention, Anti-Malware, Web Reputation, Firewall, Application Control, and Log Inspection
• Validate data flow and agent health across endpoints, appliances, and the central XDR platform leveraged by SOC teams
• Troubleshoot deployment issues, perform root cause analysis, and work directly with Trend AI support and engineering teams on escalations
• Conduct QBRs and ongoing customer success reviews; track adoption, performance metrics, and customer health
• Serve as a trusted technical advisor to customer stakeholders, translating complex security outcomes into business value
• Maintain documentation including runbooks, playbooks, deployment guides, and SOPs
• Identify expansion opportunities and work collaboratively with OpenKyber

What We're Looking For

• Required Hands-on experience deploying and managing Trend Micro Vision One in enterprise environments - this is non-negotiable
• Deep knowledge of EDR/XDR concepts and the broader endpoint security ecosystem
• Customer-facing delivery experience: you've worked directly with enterprise clients, managed relationships, and delivered outcomes - not just internal IT
• Strong communicator - comfortable presenting to C-level stakeholders (CTOs, CISOs, Security Architects) and running QBRs
• Ability to work independently in a remote, embedded engagement model with minimal hand-holding
• Located in Eastern or Central timezone

Strong Differentiators

• Trend Micro Vision One Basic or Advanced Certification (TMCP)
• Experience with adjacent OpenKyber products: Workload Security, Cloud One, TippingPoint, Deep Security
• Exposure to competitive platforms (CrowdStrike, Microsoft Defender, SentinelOne) - useful for customer conversations and migrations
• MITRE ATT&CK framework knowledge and threat hunting experience
• Experience in OT/ICS/manufacturing environments
• Additional certs: CompTIA SecurityX / CASP+, CCNA, CISSP, or equivalent

Tech Stack

• Core (required): Trend Micro Vision One (XDR, Endpoint Security, Workload Security)
• Complementary (exposure helpful): CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne Splunk, QRadar, or equivalent SIEM
• Tenable, Qualys (vulnerability management)
• Azure, AWS, Google Cloud Platform (cloud security context)
• SASE/Zero Trust architectures, DLP, CASB

For applications and inquiries, contact:View email address on us.fitly.work