VDI & Endpoint Lead Engineer (AVP)

Senior Analyst, Threat Detection and Response

Data Security Engineer - Splunk

Senior Proactive Engineer

Responsibilities: <ul><li>Administer and support enterprise VDI platforms including Omnissa Horizon, VMware ESXi, Citrix, and Nutanix environments.</li><li>Perform daily monitoring, maintenance, and operational support for VDI infrastructure and virtual desktop services.</li><li>Support endpoint management platforms including Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM/SCCM).</li><li>Assist with device provisioning, software deployment, operating system patching, and endpoint compliance activities.</li><li>Support endpoint security technologies including Microsoft Defender for Endpoint and Trellix Endpoint Security.</li><li>Investigate, troubleshoot, and resolve VDI, endpoint, and endpoint security incidents.</li><li>Perform root cause analysis and support service restoration activities for production incidents.</li><li>Support platform upgrades, patching, maintenance windows, and technology refresh initiatives.</li><li>Monitor platform health, identify issues proactively, and escalate complex issues where required.</li><li>Maintain operational documentation, technical procedures, and support records.</li><li>Collaborate with infrastructure, network, security, and application support teams on issue resolution and platform improvements.</li><li>Participate in after-hours support and maintenance activities when required.</li></ul> Requirements: <ul><li>3-7 years of experience in End User Computing (EUC), VDI, or Endpoint Infrastructure support.</li><li>Hands-on experience supporting:&nbsp;</li><li>Omnissa Horizon / VMware Horizon</li><li>VMware ESXi and vCenter</li><li>Microsoft Intune</li><li>Microsoft Endpoint Configuration Manager (MECM/SCCM)</li><li>Microsoft Defender for Endpoint</li><li>Experience supporting enterprise-scale VDI environments.</li><li>Strong troubleshooting skills across virtual desktop and endpoint platforms.</li><li>Experience supporting production environments and incident management activities.</li><li>Good understanding of endpoint lifecycle management, software deployment, and patch management.</li><li>Strong analytical, problem-solving, and communication skills.</li></ul>

Responsibilities: <ul><li>Continuously monitor security consoles and dashboards (SIEM, EDR, etc.) for suspicious activity; triage alerts to identify valid security incidents versus false positives and prioritize response based on asset criticality and business risk.</li><li>Investigate suspicious activities and security events, determine the scope and severity of incidents, and gather relevant evidence. Perform root cause analysis to identify attack vectors and affected systems.</li><li>Execute incident response actions end-to-end – including timely containment of threats, eradication of malicious artifacts, and system recovery – following the organization’s incident response plan. Coordinate with IT infrastructure, application owners, and other stakeholders to ensure effective remediation of incidents.</li><li>Proactively hunt for indicators of compromise and hidden threats in logs, network traffic, and endpoint telemetry, even without specific alerts. Use hypothesis-driven techniques and knowledge of attacker TTPs to uncover stealthy or emerging threats that evaded initial detection.</li><li>Continuously tune SIEM/EDR detection rules, thresholds, and SOAR playbooks—automating repetitive response actions to reduce false positives and accelerate containment</li><li>Leverage internal and external threat intelligence sources to enrich analysis and response. Stay updated on new vulnerabilities and adversary tactics; incorporate this knowledge to adjust monitoring rules and incident response strategies. Map observed malicious activities to frameworks like MITRE ATT&amp;CK for reporting and analysis.</li><li>Work closely with global SOC team members and escalate complex incidents to senior analysts or incident response leads when necessary. Collaborate with colleagues in other regions to ensure seamless coverage and knowledge sharing across the security team.</li><li>Document investigation steps, findings, and actions taken for each incident in a clear and concise manner. Prepare incident reports and contribute to post-incident review meetings, highlighting what occurred, how it was resolved, and recommendations to prevent future occurrences.</li><li>Assist in developing and updating incident response playbooks, standard operating procedures, and knowledge base documentation. Provide feedback and suggestions to improve security monitoring tools, analytics content (detection rules), and workflow automation (SOAR playbooks) for greater efficiency and effectiveness.</li><li>Share insights from incidents and trending threats with the broader team to enhance overall awareness. Mentor and guide junior analysts (Tier 1 SOC analysts) by sharing analysis techniques and best practices, elevating the team’s collective skill level.</li></ul> Requirements: <ul><li>Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent threat management &amp; incident response experience</li><li>Currently hold cybersecurity certifications such as GCIH, GCFA, GCIA, CEH, others</li><li>With 3 years or more, progressive experience in at least two of the following disciplines:</li><li>Threat Detection &amp; Analysis (leveraging SIEM tools, IDS/IPS, endpoint detection, log analysis, etc.)</li><li>Incident Response &amp; Management (developing response plans, executing playbooks, forensic investigations, root cause analysis)</li><li>Threat Hunting (identifying undetected threats through proactive analysis and hypothesis-driven investigation)</li><li>Cyber Threat Intelligence (gathering and analyzing threat intelligence to inform detection capabilities and preventive measures)</li><li>Network Security (TCP/IP protocols, firewalls, intrusion prevention systems, and network traffic analysis)</li><li>Securing and monitoring operating system and cloud environments (AWS, Azure, GCP), including analyzing cloud service logs and configurations for suspicious activities, and understanding cloud-native security controls and best practices</li><li>Demonstrated ability to:</li><li>Function as a Level 2 or 3 SOC Analyst (analyzing and responding to cybersecurity incidents)</li><li>Preferred Experience:</li><li>Experience with SOAR tools and some proficiency in scripting languages (e.g., Python, PowerShell) to automate repetitive tasks and streamline incident response workflows</li><li>Advanced understanding of emerging threats, zero-day vulnerabilities, and common attack vectors (phishing, malware, ransomware, lateral movement) with the ability to ensure rapid detection and response</li><li>Hands-on experience using SIEM and EDR platforms for centralized log analysis, real-time threat monitoring, and in-depth incident investigations</li><li>In-depth knowledge of the incident response lifecycle</li><li>Proven ability to conduct proactive threat hunting operations, leveraging the MITRE ATT&amp;CK framework to map adversary tactics, techniques, and procedures (TTPs), uncover stealthy threats, and close gaps in detection coverage</li><li>Familiarity with cyber threat intelligence feeds and standards (e.g., STIX, TAXII), incorporating IOCs (Indicators of Compromise) and threat intel data into monitoring and investigations to enrich context and anticipate emerging threats</li><li>Understanding of key security frameworks and regulations (e.g., NIST CSF, ISO 27001, GDPR) and the ability to align threat detection and incident response processes with organizational policies and compliance requirements</li><li>Effective at coordinating with cross-functional teams (IT, DevOps, Business, etc.) during high-impact incidents and translating complex technical findings into clear, actionable insights for executive and non-technical stakeholders</li></ul>

Responsibilities: <ul><li>Create dashboards, alerts, reports in Splunk.&nbsp;</li><li>Maintain and enhance existing reports for business.</li><li>Develop the necessary test cases and perform testing.</li><li>Implement and operationalize the use cases.</li><li>Create and maintain documentation in accordance to Bank standards.&nbsp;</li><li>Ensure appropriate standards and procedures are adhered to during the development process to support quality deliverables.</li><li>Troubleshoot, debug and provide production system support for Data Security Engineering services.</li><li>Coordinate with internal teams and vendors to resolve system issues.</li><li>Execute tasks related to project / change request / maintenance request.</li></ul> Requirements: <ul><li>Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.</li><li>Data Security product certifications will be favorable although not mandatory&nbsp;</li><li>Overall, 6 years of work experience in information technology and at least 2 years in Cyber Security.</li><li>Working experience in integrating solution with Splunk and developing Splunk contents (alerts, reports and dashboards).</li><li>At least 3 years of relevant experience in managing and deploying Data Security Solutions</li><li>Data Security or Splunk product certifications will be favorable although not mandatory.</li><li>Knowledgeable with the variety of Data Security technologies and familiar with the industry trends and best practices.</li><li>Analytical problem solver and good at troubleshooting technical issues</li><li>Hands-on experience with Windows, Unix or Linux and endpoint management tools (e.g. SCCM, JAMF).</li><li>Proficiency in network technologies, scripting and automation (e.g. PowerShell scripts, Python).</li><li>Advanced level of proficiency in Microsoft Office products.</li></ul>

Responsibilities: <ul><li>Analyze DEX tool data to identify trends, predict issues, and propose proactive interventions to enhance employee digital experience.</li><li>Develop, test, and maintain scripts and tools using PowerShell and Python to automate repetitive tasks and improve system performance.</li><li>Work with data warehouses like Redshift and analytics platforms such as Databricks. Use SQL or another programming language to work with databases and create dashboards to extract insights and develop actionable recommendations.</li><li>Develop dashboards and reporting tools using SysTrack and Microsoft Power BI to provide visibility into key performance metrics.</li><li>Collaborate with IT Service Desk and Desktop Support Teams to identify opportunities for automation and efficiency improvements.</li><li>Proactively engage with stakeholders to understand business requirements and translate them into technical solutions.</li><li>Design and implement innovative ideas to enhance customer service and reduce the mean time to resolution (MTTR).</li><li>Act as a consultant to various teams, providing technical expertise in the use of DEX tools and scripting languages.</li><li>Lead initiatives to integrate new technologies or methodologies that improve the IT environment and employee satisfaction.</li><li>Conduct Root Cause Analysis (RCA) on recurring issues and propose permanent solutions.</li><li>Engage with vendor support resources to resolve complex technical challenges and evaluate new technologies.</li><li>Work with APIs to integrate and enhance system capabilities, ensuring seamless interaction between tools and platforms.</li></ul> Requirements: <ul><li>Proficiency in DEX tools like SysTrack, Nexthink, or similar platforms.</li><li>Strong coding skills in PowerShell and Python.</li><li>Hands-on experience with data analytics platforms, such as Databricks, and data warehouses like Redshift. Proficiency in SQL as a programming language for working with databases and creating dashboards.</li><li>Expertise in Microsoft Power Apps and Power BI for data visualization and automation.</li><li>Experience in working with APIs for system integration and enhancements.</li><li>Deep understanding of IT environments, including endpoint devices, software, and cloud-based tools.</li><li>Ability to interpret data and provide actionable insights to improve digital employee experience.</li><li>Strong problem-solving skills, with experience conducting RCA and developing innovative solutions.</li><li>Demonstrated ability to identify and act on trends and opportunities in emerging technologies.</li><li>Knowledge of IT Service Management frameworks (e.g., ITIL) and their practical application.</li></ul>

Skills

Industry

Location

Jobtitle

4 endpoint hardening Jobs found

VDI & Endpoint Lead Engineer (AVP)

Senior Analyst, Threat Detection and Response

Data Security Engineer - Splunk

Senior Proactive Engineer

WhiteCrow
WhiteCrow is on a mission to connect companies with the best talent across the globe.

EMPLOYER

TALENT

COMPANY

Contact Us

JOBS BY SKILLS

JOBS BY FUNCTION

JOBS BY INDUSTRY

JOBS BY LOCATIONS

MODEL JOBS

JOBS BY CITY

Skills

Industry

Location

Jobtitle

4 endpoint hardening Jobs found

VDI & Endpoint Lead Engineer (AVP)

Senior Analyst, Threat Detection and Response

Data Security Engineer - Splunk

Senior Proactive Engineer

WhiteCrow WhiteCrow is on a mission to connect companies with the best talent across the globe.

EMPLOYER

TALENT

COMPANY

Contact Us

JOBS BY SKILLS

JOBS BY FUNCTION

JOBS BY INDUSTRY

JOBS BY LOCATIONS

MODEL JOBS

JOBS BY CITY

WhiteCrow
WhiteCrow is on a mission to connect companies with the best talent across the globe.