Noida, Uttar Pradesh

Job Summary

Job Summary : Responsible for defining, implementing, and continuously improving endpoint security strategy, standards, and controls across enterprise endpoints. The role requires hands-on expertise in endpoint hardening, security policy development, EDR management, vulnerability mitigation, and security governance using Microsoft Intune, SCCM, Microsoft Defender for Endpoint, SentinelOne, and Microsoft security technologies.

Key Responsibilities

Job Responsibilities : Define and maintain endpoint security standards, hardening baselines, and device protection policies aligned with industry best practices and security frameworks. Design and implement endpoint and browser hardening controls across Windows environments. Lead endpoint security initiatives using Microsoft Intune, SCCM, Defender for Endpoint, and SentinelOne.

Evaluate security risks and recommend appropriate controls to improve endpoint posture and reduce attack surface. Develop and enforce security policies covering encryption, privilege management, device compliance, patching, and endpoint protection. Drive vulnerability management programs, including risk assessment, remediation planning, and compliance tracking.

Provide technical leadership for endpoint security architecture, security tool optimization, and operational best practices. Support incident response activities, threat investigations, malware containment, and post-incident remediation. Create security metrics, compliance dashboards, standards documentation, and operational runbooks.

Automate security controls, monitoring, and reporting using PowerShell and Microsoft Graph.

Skill Requirements

Skill Requirement : Endpoint Security Strategy, Policy Development &

- Governance Microsoft Intune Security &
- Compliance Management Microsoft Configuration Manager (SCCM) Microsoft Defender for Endpoint (MDE) SentinelOne or equivalent EDR platform Windows Endpoint &
- Browser Hardening Security Baselines, CIS Benchmarks, and Best Practices BitLocker, Windows Firewall, Attack Surface Reduction (ASR)



Vulnerability Management &
- Risk Remediation Microsoft Entra ID, Conditional Access, Autopilot PowerShell Automation and Microsoft Graph Threat Detection, Incident Response, and Endpoint Forensics

Other Requirements

Other Requirement : 8+ years of experience in Endpoint Security Engineering or Endpoint Security Architecture. Demonstrated experience designing and implementing endpoint security policies, hardening standards, and security controls. Robust background in enterprise endpoint protection, vulnerability management, and security governance. Experience working closely with Security Operations, Infrastructure, Risk, and Compliance teams.

: Endpoint Security Engineer\r\nRole Summary\r\n\r\nResponsible for defining, implementing, and continuously improving endpoint security strategy, standards, and controls across enterprise endpoints. The role requires hands-on expertise in endpoint hardening, security policy development, EDR management, vulnerability mitigation, and security governance using Microsoft Intune, SCCM, Microsoft Defender for Endpoint, SentinelOne, and Microsoft security technologies.\r\n\r\nKey Responsibilities\r\nDefine and maintain endpoint security standards, hardening baselines, and device protection policies aligned with industry best practices and security frameworks.\r\nDesign and implement endpoint and browser hardening controls across Windows environments.\r\nLead endpoint security initiatives using Microsoft Intune, SCCM, Defender for Endpoint,



and SentinelOne.\r\nEvaluate security risks and recommend appropriate controls to improve endpoint posture and reduce attack surface.\r\nDevelop and enforce security policies covering encryption, privilege management, device compliance, patching, and endpoint protection.\r\nDrive vulnerability management programs, including risk assessment, remediation planning, and compliance tracking.\r\nProvide technical leadership for endpoint security architecture, security tool optimization, and operational best practices.\r\nSupport incident response activities, threat investigations, malware containment, and post-incident remediation.\r\nCreate security metrics, compliance dashboards, standards documentation, and operational runbooks.\r\nAutomate security controls, monitoring, and reporting using PowerShell and Microsoft Graph.\r\nTechnical Skills\r\nEndpoint Security Strategy, Policy Development &

- Governance\r\nMicrosoft Intune Security &
- Compliance Management\r\nMicrosoft Configuration Manager (SCCM)\r\nMicrosoft Defender for Endpoint (MDE)\r\nSentinelOne or equivalent EDR platform\r\nWindows Endpoint &
- Browser Hardening\r\nSecurity Baselines, CIS Benchmarks, and Best Practices\r\nBitLocker, Windows Firewall, Attack Surface Reduction (ASR)\r\nVulnerability Management &
- Risk Remediation\r\nMicrosoft Entra ID, Conditional Access, Autopilot\r\nPowerShell Automation and Microsoft Graph\r\nThreat Detection, Incident Response, and Endpoint Forensics\r\nExperience\r\n5+ years of experience in Endpoint Security Engineering or Endpoint Security Architecture.\r\nDemonstrated experience designing and implementing endpoint security policies, hardening standards, and security controls.\r\nStrong background in enterprise endpoint protection, vulnerability management, and security governance.\r\nExperience working closely with Security Operations, Infrastructure, Risk, and Compliance teams.

#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-

📌 SME - Symantec Email Security, Endpoint Security (Noida)
🏢 HCLTech
📍 Noida