MS Senior Endpoint Security Engineer

Be in IT is a recruitment company specializing in finding specialists in the IT technology sector. Operating since 2016 and as a freelancer since 2021, Be in IT provides comprehensive support to clients in IT technology needs, focusing on precise and comprehensive job offers and effective recruitment conversations. The company holds a certificate from the National Employment Agency Register (number 27663).

• Experienced Senior Endpoint Security Engineer supporting endpoint protection development and applying security-by-design.
• Minimum 5 years of experience in endpoint security or cybersecurity engineering.
• Very good practical knowledge of Microsoft Defender for Endpoint (EDR); knowledge of CrowdStrike and NGAV is a plus.
• Knowledge of MDM (e.g., MS Intune) and orchestration tools such as Ansible.
• Experience in endpoint detection & response, threat hunting, and incident response.
• Good knowledge of Windows, PowerShell, and corporate IT infrastructure.
• Knowledge of the MITRE ATT&CK framework and the modern threat landscape.
• Experience in large, complex enterprise environments.

Nice to have:

• Basic Linux knowledge.
• Experience with CrowdStrike Falcon or other EDR.
• Experience with SIEM/SOAR tools (e.g., Microsoft Sentinel).
• Cloud security knowledge (e.g., Azure, Defender for Cloud).
• Certifications such as Microsoft Security, CISSP, CEH.
• English language proficiency at C1 level.
• Willingness to visit Wrocław once or twice a month (1 day).
• Availability ASAP or acceptable up to 3-month notice period.

• Designing, implementing, and optimizing global endpoint security solutions.
• Developing and continuously improving Microsoft Defender for Endpoint (MDE), including EDR, ASR rules, threat hunting, and automation.
• Monitoring, analyzing, and responding to advanced threats and incidents on endpoint devices.
• Creating detection use cases and increasing threat visibility.
• Implementing FIM, DSPM, and application and device control.
• Collaborating with SOC, IT, and Architecture teams to ensure integrated and scalable security mechanisms.

• Work location: Wrocław with requirement to visit office once or twice a month (1 day).
• Employment contract only (no B2B).
• English language proficiency at C1 level required.