Endpoint Security Engineer / Endpoint Security Analyst

Role Overview

Vinca Cybertech is seeking an Endpoint Security Resource to support endpoint protection, threat monitoring, security policy administration and incident response across user devices and servers. The successful candidate will help maintain endpoint security tool health, investigate alerts, remediate threats and improve endpoint security coverage in line with organisational standards.

Key Responsibilities

• Administer and monitor endpoint security solutions, including EPP, EDR and/or XDR capabilities.
• Monitor security alerts and investigate malware, suspicious activity, endpoint compromise and policy violations.
• Perform initial triage, containment and remediation in accordance with documented playbooks and escalation procedures.
• Deploy, configure, update and troubleshoot endpoint security agents on Windows and, where applicable, macOS and Linux systems.
• Manage endpoint security policies, exclusions, device groups, agent health and version compliance.
• Support antivirus/anti-malware operations, host firewall controls, device control and application control where applicable.
• Review endpoint telemetry and logs; correlate relevant information with SIEM or SOC alerts when required.
• Coordinate with IT support, infrastructure, network and SOC teams to resolve endpoint security issues.
• Track endpoint coverage, agent connectivity, signature/platform updates and remediation status; follow up on non-compliant devices.
• Assist with vulnerability remediation, security configuration reviews, patch coordination and audit evidence collection.
• Maintain incident tickets, investigation notes, root-cause summaries, operational reports and knowledge-base documentation.
• Participate in security incident response activities and recommend improvements to endpoint controls and procedures.

Required Skills & Experience

• 2–4 years of relevant experience in endpoint security, cybersecurity operations, IT security or a SOC environment.
• Hands-on experience with at least one endpoint security platform, such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Trellix, Sophos, Trend Micro or an equivalent solution.
• Working knowledge of EPP, EDR, malware detection, endpoint isolation, alert triage and remediation workflows.
• Good understanding of Windows operating systems, endpoint services, processes, event logs and basic networking.
• Familiarity with endpoint agent deployment, policy configuration, health monitoring and troubleshooting.
• Understanding of common attack techniques, phishing, ransomware, malware behaviour and security hygiene.
• Exposure to ticketing systems, incident documentation, change management and escalation procedures.
• Strong analytical, troubleshooting, communication and coordination skills.

Preferred / Good to Have

• Exposure to Microsoft Intune, Group Policy, Active Directory / Entra ID or endpoint configuration management.
• Basic knowledge of SIEM platforms such as Microsoft Sentinel, Splunk or QRadar.
• Familiarity with vulnerability management, hardening baselines, application control and device control.
• Relevant certifications in endpoint security, Microsoft security, networking or cybersecurity operations.

Success Measures

• Healthy endpoint agent coverage and timely remediation of agent issues.
• Timely triage, containment and escalation of endpoint security alerts.
• Improved endpoint policy compliance and reduced exposure to known threats.
• Accurate incident records, operational reporting and adherence to security procedures.

Education

Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent practical experience.

Candidate Profile

A proactive and methodical security professional with practical endpoint troubleshooting skills, sound incident-handling discipline and the ability to work effectively with IT and SOC teams.