Endpoint Security Engineer

Endpoint Security Engineer

Location: Charlotte, NC (4 days onsite / 1 day remote)
Duration: Contract through end of year with strong likelihood of extension (budgeted through 2027)
Interview Process: Single round Webex

Overview

We are seeking a highly skilled Endpoint Security Engineer to design, implement, and maintain enterprise endpoint security solutions across a large-scale environment. This role is heavily focused on hands-on Tanium engineering, requiring deep experience configuring, tuning, and optimizing Tanium modules-not just monitoring or utilizing existing deployments.

This is an opportunity to join a collaborative, high-performing team responsible for securing thousands of endpoints and driving continuous improvement across endpoint detection, response, and vulnerability management.

Key Responsibilities

• 
  

  Engineer & Optimize Endpoint Security Solutions
  Design, build, implement, and maintain endpoint security tools, with a strong focus on Tanium platform engineering

  
  


• 
  

  Tanium Platform Ownership
  Configure, tune, and manage Tanium modules including:
  Comply Plus, Core Platform, Deploy, Discover, Enforce, Integrity Monitor, Patch, Performance, Threat Response

  
  


• 
  

  Patch & Vulnerability Management
  Automate and manage OS and third-party patching across a large enterprise environment to proactively remediate vulnerabilities

  
  


• 
  

  Endpoint Detection & Response (EDR)
  Deploy and maintain tools such as CrowdStrike, ensuring proper configuration and response workflows

  
  


• 
  

  Incident Response & Forensics
  Investigate endpoint security incidents, isolate affected systems, and perform root cause analysis to prevent recurrence

  
  


• 
  

  Security Policy & Controls
  Develop and enforce endpoint security policies including MFA, device controls, and user access standards

  
  


• 
  

  Telemetry & Threat Analysis
  Correlate endpoint and log data (e.g., via Splunk) to identify complex attack patterns and security risks

  
  


• 
  

  Automation & Scripting
  Build scripts using PowerShell, Python, or Bash to streamline deployments, remediation actions, and monitoring

  
  

Required Qualifications

• Proven experience as an Endpoint Security Engineer in a large enterprise environment


• Hands-on Tanium engineering experience (must have built, configured, and maintained-not just used)


• Expertise across multiple Tanium modules listed above


• Strong knowledge of Windows and Linux operating systems


• Experience with:
  
  
  
  • CrowdStrike (EDR)
  
  
  • Splunk (log analysis / SIEM)
  
  
  • CyberArk (privileged access management)
  
  
  
  


• Experience supporting large endpoint environments (thousands of devices)

Preferred Qualifications

• Certifications such as CISSP, CompTIA Security+, or similar


• Strong background in automation and security tooling optimization

Soft Skills

• Self-driven and proactive - able to operate with minimal oversight


• Strong sense of accountability and ownership


• Clear and concise communicator


• Reliable, focused, and engaged during working hours

Additional Details

• Schedule: Monday-Friday, 8:00 AM - 5:00 PM (ET)


• Work Environment: Collaborative, team-oriented, and stable long-term engagement