Note: The job is a remote job and is open to candidates in USA. UVA Health is an academic health system providing patient care, research, education, and innovation. The Senior Endpoint Security Engineer will lead the development and maturation of enterprise endpoint security capabilities, including EDR administration, security control engineering, threat investigation, incident response, and security standards development. The role will also help establish scalable security operations processes and improve the organization’s cybersecurity resilience.
Responsibilities
- Administer, maintain, and optimize enterprise endpoint detection and response (EDR) technologies
- Engineer and tune endpoint security controls, policies, detections, and automation workflows
- Investigate endpoint security alerts, suspicious activity, and emerging threats
- Support security incident response and assist with complex investigations
- Develop operational procedures, playbooks, workflows, and security standards
- Partner with infrastructure and engineering teams to implement secure endpoint configurations
- Evaluate new security technologies and recommend improvements that enhance security posture
- Build dashboards, monitoring capabilities, security metrics, and automated response processes
- Serve as a trusted technical resource and escalation point for endpoint security initiatives
- Help establish and mature security processes, procedures, and operational best practices
Skills
- Education: Bachelor's Degree in an appropriate specialty, or an equivalent combination of accreditation, education and experience required
- 5+ years relevant professional experience required
- 3+ years of demonstrated experience administering EDR tools (e.g., MDE, CrowdStrike Falcon, SentinelOne, or VMware Carbon Black) in a large enterprise environment
- Strong understanding of endpoint attack techniques, malware analysis, lateral movement, persistence mechanisms, and endpoint incident response
- Excellent written and verbal communication skills, with the ability to translate security concepts for non‑technical audiences
- Progressively responsible experience in cybersecurity operations or engineering within a regulated environment (Healthcare preferred)
- Vendor-specific EDR certifications demonstrating competency in either administration or an investigative capacity
- Industry cybersecurity certifications such as CISSP, GCIH, GCED, GCFA, CySA+, CEH, or Security+
Benefits
- Medical, Dental, and Vision Insurance
- Paid Time Off
- Long-term and Short-term Disability
- Retirement Savings
- Health Saving Plans
- Flexible Spending Accounts
- Certification and education support
- Generous Paid Time Off
Company Overview