端点防御主管
Head of Endpoint Defense
我们是谁
在 Kyndryl,我们设计、构建、管理并现代化全球每天依赖的关键技术系统。为什么要在 Kyndryl 工作?我们始终向前迈进——不断推动自己,在建设更公平、更具包容性的员工、客户和社区环境方面走得更远。
职位描述
职位目的
领导 Kyndryl 的终端防护职能,负责 Palo Alto Cortex XDR、Microsoft Defender for Endpoint、Trend Micro 以及其他终端工具的运营、调优和覆盖。确保在异构、多供应商的终端设备中保持一致的预防、检测和遥测质量,并确保终端信号能干净地进入检测流程。将该职能作为平台服务交付给网络安全团队,而非独立的检测权威。
主要职责
- 负责终端防护资产的运营、策略和健康状态:Cortex XDR、Microsoft Defender for Endpoint、Trend Micro 及其他终端工具。
- 在受管终端设备中推动代理覆盖率、部署和配置完整性,填补可见性缺口。
- 与网络安全团队和 SIEM/SOAR 合作,调整预防和检测策略,平衡效果与操作干扰。
- 对多供应商终端栈进行合理化,实现一致的覆盖和减少重叠,采取可辩护的整合或共存策略。
- 确保终端遥测数据完整、及时,并正确集成到 XSIAM 和检测流程中。
- 在事件负责人要求时,提供终端隔离、遏制和取证数据以支持事件响应。
- 推动代理部署、健康监控、策略管理、修复操作和遥测质量的自动化,以降低运营负担并提高响应速度。
- 建立并报告终端安全 KPI,包括覆盖率、代理健康状况、预防效果、遥测质量、遏制表现和修复结果。
- 领导并发展终端防护团队。
- 职责范围
- 终端防护资产的运营效率和健康状况。
- 终端覆盖率和遥测质量在整个设备中的表现。
- 终端对检测和事件遏制的贡献。
- 终端防护人员的领导和发展。
- 通过自动化、标准化和最佳实践持续改进运营流程。
查看英文原文
Who We Are
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
The Role
Role Purpose
Leads Kyndryl's endpoint defense function, owning the operation, tuning, and coverage of the endpoint detection and response estate across Palo Alto Cortex XDR, Microsoft Defender for Endpoint, Trend Micro, and additional endpoint tooling. Ensures consistent prevention, detection, and telemetry quality across a heterogeneous, multi-vendor fleet, and that endpoint signal feeds the detection pipeline cleanly. Runs the function as a platform service to Cyber Defense, not as an independent detection authority.
Key Responsibilities
- Own operations, policy, and health for the endpoint defense estate: Cortex XDR, Microsoft Defender for Endpoint, Trend Micro, and other endpoint tooling.
- Drive agent coverage, deployment, and configuration integrity across the managed fleet, closing gaps in visibility.
- Tune prevention and detection policy to balance efficacy against operational disruption, in partnership with Cyber Defense and SIEM/SOAR.
- Rationalize the multi-vendor endpoint stack toward consistent coverage and reduced overlap, with a defensible consolidation or coexistence posture.
- Ensure endpoint telemetry is complete, timely, and correctly integrated into XSIAM and the detection pipeline.
- Support incident response with endpoint containment, isolation, and forensic data on demand from the Incident Commander.
- Drive automation for agent deployment, health monitoring, policy management, remediation actions, and telemetry quality to reduce operational overhead and improve response times.
- Establish and report on endpoint security KPIs, including coverage, agent health, prevention efficacy, telemetry quality, containment performance, and remediation outcomes.
- Lead and develop the endpoint defense team.
Accountabilities
- Operational effectiveness and health of the endpoint defense estate.
- Endpoint coverage and telemetry quality across the fleet.
- Endpoint contribution to detection and to incident containment.
- Leadership and development of endpoint defense personnel.
- Continuous improvement of operational processes through automation, standardization, and best practices.
Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.
Who You Are
Who You Are
You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.
Required Skills and Experience
•Mastery of security tools and technologies, such as firewalls, intrusion detection/prevention systems, endpoint security, , and SIEM solutions
•Deep understanding of operating systems (e.g., Windows, Linux) and their security mechanisms
•Knowledge of security standards and compliance requirements (e.g., ISO 27001, NIST, GDPR)
•Experience with key market leading technologies in the relevant area
•Ability to assess and follow best practices in technology deployment and configuration
•Experience with the design and implementation of security architectures, segmentation and zero trust frameworks
Preferred Skills and Experience
•Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or other related fields
•Experience with workload, server, network architectures and associated security controls
The compensation range for the position in the U.S. is$115,080 to $218,520 based on a full-time schedule.
Your actual compensation may vary depending on your geography, job-related skills and experience.For part time roles, the compensation will be adjusted appropriately. The pay or salary range will not be below any applicable state, city or local minimum wage requirement.
There is a different applicable compensation range for the following work locations:
California (San Francisco Bay Area):$138,120 to$ 262,320
California (All Other):$126,600 to $240,480
Colorado:$115,080 to$ 218,520
Massachusetts$115,080 to $240,480
New York City:$138,120 to$ 262,320
Washington:$126,600 to $240,480
Washington DC:$126,600 to $240,480
This position will be eligible for Kyndryl’s discretionary annual bonus program, based on performance and subject to the terms of Kyndryl’s applicable plans. You may also receive a comprehensive benefits package which includes medical and dental coverage, disability, retirement benefits, paid leave, and paid time off.Note: If this is a sales commission eligible role, you will be eligible to participate in a sales commission plan in lieu of the annual discretionary bonus program.
Applications will be accepted on a rolling basis.
Equal Opportunity Employer
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran
Being You
Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.
What You Can Expect
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
Get Referred!
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.
Originally posted on Himalayas