Endpoint Security Engineer

Job Title: Endpoint Security Engineer Location : Hybrid in Charlotte, NC (4 days onsite / 1 day remote) Duration: - 06+ months Interview onsite Overview We are seeking a highly skilled Endpoint Security Engineer to design, implement, and maintain enterprise endpoint security solutions across a large-scale environment. This role is heavily focused on hands-on Tanium engineering , requiring deep experience configuring, tuning, and optimizing Tanium modules-not just monitoring or utilizing existing deployments. This is an opportunity to join a collaborative, high-performing team responsible for securing thousands of endpoints and driving continuous improvement across endpoint detection, response, and vulnerability management. Key Responsibilities Engineer & Optimize Endpoint Security Solutions Design, build, implement, and maintain endpoint security tools, with a strong focus on Tanium platform engineering Tanium Platform Ownership Configure, Tune, And Manage Tanium Modules Including Comply Plus, Core Platform, Deploy, Discover, Enforce, Integrity Monitor, Patch, Performance, Threat Response Patch & Vulnerability Management Automate and manage OS and third-party patching across a large enterprise environment to proactively remediate vulnerabilities Endpoint Detection & Response (EDR) Deploy and maintain tools such as CrowdStrike, ensuring proper configuration and response workflows Incident Response & Forensics Investigate endpoint security incidents, isolate affected systems, and perform root cause analysis to prevent recurrence Security Policy & Controls Develop and enforce endpoint security policies including MFA, device controls, and user access standards Telemetry & Threat Analysis Correlate endpoint and log data (e.g., via Splunk) to identify complex attack patterns and security risks Automation & Scripting Build scripts using PowerShell, Python, or Bash to streamline deployments, remediation actions, and monitoring Required Qualifications Proven experience as an Endpoint Security Engineer in a large enterprise environment Hands-on Tanium engineering experience (must have built, configured, and maintained-not just used) Expertise across multiple Tanium modules listed above Strong knowledge of Windows and Linux operating systems Experience with: CrowdStrike (EDR) Splunk (log analysis / SIEM) CyberArk (privileged access management) Experience supporting large endpoint environments (thousands of devices) Preferred Qualifications Certifications such as CISSP, CompTIA Security+, or similar Strong background in automation and security tooling optimization