Lead insider threat detection and response efforts - build and maintain detection logic, investigate anomalous user behaviour, and drive incident response for insider threat cases.

Manage and mature the enterprise Data Loss Prevention (DLP) programme: define and refine DLP policies, monitor alerts, investigate violations, and coordinate remediation with stakeholders.

Own the end-to-end management of the enterprise EDR platform - deployment, policy configuration, tuning, and ongoing optimisation across Windows, macOS, and Linux endpoints.

Develop new detection use cases, monitoring strategies and automation workflows for endpoint-based threats, leveraging telemetry from EDR, DLP, UEBA, and other endpoint security tools.

Triage, investigate, and respond to endpoint security alerts; perform root cause analysis and recommend containment and remediation actions.

Conduct proactive threat hunting across endpoint telemetry to identify advanced threats and attacker techniques that evade signature-based detection.

Collaborate with the SOC, threat intelligence, and incident response teams to correlate endpoint findings with broader security events.

Evaluate, recommend, and integrate new endpoint security technologies and capabilities as the threat landscape evolves.

Develop and maintain runbooks, standard operating procedures, and documentation for endpoint security operations and incident response workflows.

Produce metrics, dashboards, and executive-level reports on endpoint security posture, alert trends, and insider threat programme maturity.

Partner with IT and infrastructure teams to provide security guidance on endpoint hardening, configuration baselines, and secure deployment practices.

7+ years of experience in information security, with at least 5 years focused on endpoint security engineering.

Staff Endpoint Security Engineer

Responsibilities

Qualification

Required

Company

Chargepoint

More roles at Chargepoint