Endpoint & Email Security Engineer (contract)

Responsibilities

• Engineer and support endpoint security tools (CrowdStrike, Defender, BitLocker, Symantec, etc.) across Windows, macOS, and Linux
• Manage email security platforms (Proofpoint, FireEye/Mandiant)
• Automate processes and integrate security tools to improve detection and response
• Lead incident response for endpoint and email threats (phishing, malware, BEC)
• Analyze logs, telemetry, and alerts to identify and remediate threats
• Conduct root cause analysis, forensics, and threat hunting
• Partner with SOC, infrastructure, and security teams
• Mentor junior team members and contribute to team initiatives
• Maintain documentation, standards, and security best practices

Requirements

• Experience in Information Security Engineering
• Hands-on experience with EDR tools (CrowdStrike, Microsoft Defender) and Windows administration
• Experience with enterprise email security platforms (Proofpoint, FireEye, or similar)
• Scripting experience (PowerShell or Python)
• Familiarity with SDLC and SIEM tools (e.g., Splunk)
• Strong knowledge of phishing and email-based threats
• Experience with REST APIs, cloud security (AWS/Azure/GCP), and tool integrations
• Knowledge of Zero Trust, NIST, ISO, or MITRE ATT&CK frameworks
• Familiarity with DMARC, DKIM, SPF, and BEC prevention
• Relevant degree or industry certifications (CISSP, GIAC, OSCP, etc.)