Sr Subject Matter Expert (Support&Ops)

Job description

Endpoint Security Engineer (AV & EDR) the L3 Endpoint Security Engineer serves as the technical Subject Matter Expert (SME) for Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. This role is responsible for solution architecture, advanced threat investigations, platform optimization, governance, and escalation support for complex security incidents and infrastructure issues. The position provides technical leadership to L1/L2 teams and drives continuous improvement of endpoint security services. \\r\\n\\r\\n \\r\\n\\r\\nKey Responsibilities: \\r\\n\\r\\nMust have 8+ years of experience in Endpoint Security and Implementation (MS Defender, SentinelOne, Crowdstrike..) \\r\\n\\r\\n \\r\\n\\r\\nAct as the Subject Matter Expert (SME) for enterprise Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. \\r\\n\\r\\nDesign, implement, administer, and optimize endpoint security solutions across enterprise environments. \\r\\n\\r\\nLead deployment, migration, upgrade, and integration projects for endpoint security technologies. \\r\\n\\r\\nDefine and maintain endpoint security baselines, standards, policies, and governance controls for AV, EDR, Firewall, ASR, Device Control, and Web Protection \\r\\n\\r\\nLead investigation and resolution of critical security incidents, malware outbreaks, ransomware attacks, and advanced threats. \\r\\n\\r\\nPerform advanced threat hunting, malware analysis, forensic investigations, and root cause analysis activities. \\r\\n\\r\\nDevelop and implement containment, remediation, recovery, and detection enhancement strategies to improve security posture. \\r\\n\\r\\nReview and optimize security policies, exclusions, detections, alerts, and response workflows to improve protection effectiveness and reduce false positives. \\r\\n\\r\\nAct as the highest technical escalation point for complex endpoint security, agent health, onboarding, telemetry, policy, and integration-related issues. \\r\\n\\r\\nDesign and support integrations with Microsoft Intune, Active Directory, Entra ID, SIEM platforms, Microsoft Sentinel, Splunk, and SOC monitoring solutions \\r\\n\\r\\nDrive continuous service improvement initiatives through platform tuning, automation, orchestration, and operational process optimization. \\r\\n\\r\\nConduct Proof of Concepts (POCs), evaluate emerging endpoint security technologies, and provide strategic recommendations for future security enhancements. \\r\\n\\r\\nCollaborate with SOC, Infrastructure, Cloud, and Endpoint Management teams to strengthen detection, response, and security operations capabilities. \\r\\n\\r\\nDevelop and maintain technical documentation, architecture diagrams, SOPs, runbooks, standards, and knowledge base articles. \\r\\n\\r\\nProvide technical leadership, mentoring, training, and knowledge transfer to L1 and L2 engineers. \\r\\n\\r\\nPrepare executive reports, security posture assessments, compliance reports, risk analyses, and strategic recommendations for stakeholders and management. \\r\\n\\r\\nSupport audit, compliance, and governance activities while ensuring adherence to organizational security requirements and best practices. \\r\\n\\r\\n Key Responsibilities the L3 Endpoint Security Engineer serves as the technical Subject Matter Expert (SME) for Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. This role is responsible for solution architecture, advanced threat investigations, platform optimization, governance, and escalation support for complex security incidents and infrastructure issues. The position provides technical leadership to L1/L2 teams and drives continuous improvement of endpoint security services. \\r\\n\\r\\n \\r\\n\\r\\nKey Responsibilities: \\r\\n\\r\\nMust have 8+ years of experience in Endpoint Security and Implementation (MS Defender, SentinelOne, Crowdstrike..) \\r\\n\\r\\n \\r\\n\\r\\nAct as the Subject Matter Expert (SME) for enterprise Antivirus (AV), Next-Generation Antivirus (NGAV), and Endpoint Detection & Response (EDR) platforms. \\r\\n\\r\\nDesign, implement, administer, and optimize endpoint security solutions across enterprise environments. \\r\\n\\r\\nLead deployment, migration, upgrade, and integration projects for endpoint security technologies. \\r\\n\\r\\nDefine and maintain endpoint security baselines, standards, policies, and governance controls for AV, EDR, Firewall, ASR, Device Control, and Web Protection \\r\\n\\r\\nLead investigation and resolution of critical security incidents, malware outbreaks, ransomware attacks, and advanced threats. \\r\\n\\r\\nPerform advanced threat hunting, malware analysis, forensic investigations, and root cause analysis activities. \\r\\n\\r\\nDevelop and implement containment, remediation, recovery, and detection enhancement strategies to improve security posture. \\r\\n\\r\\nReview and optimize security policies, exclusions, detections, alerts, and response workflows to improve protection effectiveness and reduce false positives. \\r\\n\\r\\nAct as the highest technical escalation point for complex endpoint security, agent health, onboarding, telemetry, policy, and integration-related issues. \\r\\n\\r\\nDesign and support integrations with Microsoft Intune, Active Directory, Entra ID, SIEM platforms, Microsoft Sentinel, Splunk, and SOC monitoring solutions \\r\\n\\r\\nDrive continuous service improvement initiatives through platform tuning, automation, orchestration, and operational process optimization. \\r\\n\\r\\nConduct Proof of Concepts (POCs), evaluate emerging endpoint security technologies, and provide strategic recommendations for future security enhancements. \\r\\n\\r\\nCollaborate with SOC, Infrastructure, Cloud, and Endpoint Management teams to strengthen detection, response, and security operations capabilities. \\r\\n\\r\\nDevelop and maintain technical documentation, architecture diagrams, SOPs, runbooks, standards, and knowledge base articles. \\r\\n\\r\\nProvide technical leadership, mentoring, training, and knowledge transfer to L1 and L2 engineers. \\r\\n\\r\\nPrepare executive reports, security posture assessments, compliance reports, risk analyses, and strategic recommendations for stakeholders and management. \\r\\n\\r\\nSupport audit, compliance, and governance activities while ensuring adherence to organizational security requirements and best practices. \\r\\n\\r\\n Skill Requirements Develop and maintain technical documentation, architecture diagrams, SOPs, runbooks, standards, and knowledge base articles. \\r\\n\\r\\nProvide technical leadership, mentoring, training, and knowledge transfer to L1 and L2 engineers. \\r\\n\\r\\nPrepare executive reports, security posture assessments, compliance reports, risk analyses, and strategic recommendations for stakeholders and management. \\r\\n\\r\\nSupport audit, compliance, and governance activities while ensuring adherence to organizational security requirements and best practices. Other Requirements Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Plea