高级终端安全工程师 – Carbon Black & Symantec
Senior Endpoint Security Engineer – Carbon Black & Symantec
高级终端安全工程师 – Carbon Black 与 Symantec
合同或合同转正式职位
远程 美国
**请勿中介
职位概述
我们正在寻找一位在 VMware Carbon Black 和 Symantec 终端安全平台方面具有深厚专业知识的高级终端安全工程师。该职位负责企业环境中终端保护技术的设计、部署、优化和生命周期管理。高级工程师将推动策略制定，领导复杂问题排查，指导初级团队成员，并在威胁调查和架构决策中担任专家角色。
主要职责
- 领导企业范围内的 Carbon Black 和 Symantec 终端平台的部署、配置和生命周期操作。
- 设计符合组织标准和零信任原则的可扩展终端安全解决方案。
- 开发并优化高级策略、应用控制、EDR 规则、防篡改设置和预防控制。
- 监督调优工作，以平衡保护、性能和运营效率。
- 作为终端安全问题和代理健康故障的三级工程支持。
- 使用 Carbon Black 和 Symantec 的遥测数据、进程分析和行为跟踪进行深入事件调查。
- 与 SIEM、SOAR、漏洞管理及 IT 运维工具建立集成。
- 通过 PowerShell、Python 或 Bash 实现终端管理任务的自动化。
- 创建企业标准、架构文档、运行手册和工程操作手册。
- 指导中级和初级工程师；为团队能力发展做出贡献。
- 评估新功能，进行 PoC 测试，并推荐终端策略改进方案。
- 支持合规要求，包括 ISO 27001、NIST CSF、CIS 控制项以及行业特定法规。
- 所需资格
- 6–10 年的信息安全或终端工程相关工作经验。
- 对 VMware Carbon Black（App Control、EDR、Cloud）有专家级经验，包括高级策略设计、事件响应和控制台管理。
- 对 Symantec 终端安全平台（SEP、SES、Symantec EDR、内容策略调优）有专家级经验。
- 对终端取证、恶意软件分析基础和攻击者战术有深刻理解。
- 熟悉 Windows、macOS 和/或 Linux 终端内部结构和事件日志。
- 有集成终端数据的经验
查看英文原文
Senior Endpoint Security Engineer – Carbon Black & Symantec
Contract or Contract to Hire
Remote USA
**No Agencies Please
Position Summary
We are seeking a Senior Endpoint Security Engineer with deep expertise in VMware Carbon Black and Symantec endpoint security platforms. This role owns the design, deployment, optimization, and lifecycle management of endpoint protection technologies across enterprise environments. The Senior Engineer will drive strategy, lead complex troubleshooting, mentor junior team members, and serve as a subject matter expert during threat investigations and architectural decisions.
Key Responsibilities
- Lead enterprise-wide deployment, configuration, and lifecycle operations for Carbon Black and Symantec endpoint platforms.
- Architect scalable endpoint security solutions aligned to organizational standards and zero-trust principles.
- Develop and refine advanced policies, application controls, EDR rules, tamper protection settings, and prevention controls.
- Oversee tuning activities to balance protection, performance, and operational efficiency.
- Serve as Tier 3 engineering escalation for endpoint security issues and agent health failures.
- Lead deep-dive incident investigations using Carbon Black and Symantec telemetry, process analysis, and behavioral tracking.
- Build integrations with SIEM, SOAR, vulnerability management, and IT ops tools.
- Drive automation of endpoint management tasks through PowerShell, Python, or Bash.
- Create enterprise standards, architecture documentation, runbooks, and engineering playbooks.
- Mentor mid-level and junior engineers; contribute to team capability development.
- Evaluate new capabilities, conduct PoCs, and recommend improvements to endpoint strategy.
- Support compliance requirements including ISO 27001, NIST CSF, CIS Controls, and sector-specific mandates.
Required Qualifications
- 6–10 years of experience in information security or endpoint engineering roles.
- Expert-level experience with VMware Carbon Black (App Control, EDR, Cloud) including advanced policy design, incident response, and console administration.
- Expert-level experience with Symantec endpoint security platforms (SEP, SES, Symantec EDR, content policy tuning).
- Strong understanding of endpoint forensics, malware analysis fundamentals, and attacker tradecraft.
- Proficiency with Windows, macOS, and/or Linux endpoint internals and event logging.
- Demonstrated experience integrating endpoint data with SIEM/SOAR platforms.
- Ability to lead complex troubleshooting involving OS, network, and security layers.
- Strong documentation, communication, and technical leadership abilities.
Preferred Qualifications
- Experience designing enterprise security architectures or zero-trust endpoint models.
- Significant experience in environments with 5,000+ endpoints.
- Development or automation experience with PowerShell, Python, Bash, or REST APIs.
- Experience with threat modeling, purple teaming, or incident response leadership.
- Certifications such as CBCA, CBCM, Symantec/Broadcom certifications, GSEC, GCED, GCIA, GCFA, or similar.
Soft Skills & Leadership
- Strong ownership mindset with the ability to drive outcomes with minimal oversight.
- Capable of leading cross-functional initiatives involving SOC, IT, cloud engineering, and compliance teams.
- High judgment and ability to balance business, operational, and security requirements.
- Able to communicate complex technical concepts to executives and non-technical stakeholders.
- Mentors others, raises team maturity, and establishes engineering best practices.
Hiring Assumptions: Potential Start date - January 1, 2026
Originally posted on Himalayas