Cyber Defense Engineering II - Endpoint Protection

Role Overview
You will become a key member of Cyber Defense Engineering - Endpoint Protection team and will support senior colleagues in configuring and maintaining security controls across the endpoint security domain. Your primary goal is to ensure 100% endpoint security agent deployment, visibility and control enforcement compliance across the enterprise.
This will primarily involve: managing endpoint security agent health, deploying and troubleshooting agent version upgrades and security content updates, refining AV / EDR policy configurations and exclusions to reduce "noise" while maintaining high security posture.
Additionally, you will play a hands-on role in ensuring seamless, secure, and performant enterprise-wide AV / EDR control migrations between industry-leading platforms.

Key Responsibilities
● Endpoint Security Agent Management: Work with your Cyber Defense colleagues as well as Desktop, Server, Cloud Compute engineering and other technology teams as required to deploy, update, and troubleshoot endpoint security agents across Windows, Linux, and macOS endpoint environments.
● Platform Management: Assist in driving enterprise-wide deployments and migrations of next-generation AV / EDR controls, ensuring consistent coverage during transition periods.
● Policy Administration: Assist with the configuration and maintenance of all policies in the endpoint security control domain, primarily including: prevention, detection and response, device control, security content updates, exclusions, network containment and host-based firewall rules management.
● Health Monitoring: Proactively identify and resolve incidents of non-compliant compute endpoints with unhealthy endpoint security agent states.
● Issue Resolution (Tier 1/2 ticket management): Monitor the Cyber Defense Engineering - Endpoint Protection ticket queue, taking ownership of tier 1/2 operational support requests and incidents.
● Exclusion Tuning: Work with system owners as required to configure and maintain narrowly defined AV / EDR exclusions to prevent false positives without creating security gaps, while also ensuring system performance.
● Documentation: Upkeep of the team’s internal knowledgebase including all documentation pages and standard operating procedures (SOPs) relating to endpoint security agent and platform management.

Required Skills & Qualifications
Technical Skills & Work Experience
● Education & Experience: Bachelor’s degree in Cybersecurity, Computer Science, or a related technical field (or 2-4 years of equivalent hands-on experience in IT security, systems support, or engineering related roles).
● OS Fundamentals: Strong grasp of Windows, Mac, and Linux operating system internals, command-line usage and log analysis.
● Scripting: Basic proficiency in at least two common scripting languages (e.g. PowerShell for Windows environments, Bash for Linux/macOS environments, Python for cross-platform support).
● Networking: Understanding of networking fundamentals including TCP/IP and DNS (e.g. how endpoints communicate across enterprise networks, how endpoint security agents communicate with cloud-based cybersecurity platforms).
● Industry Certifications:
○ Foundational IT security certifications (e.g. CompTIA Security+)
○ Endpoint security administration oriented certifications are highly preferred / desirable.
Professional & Soft Skills
● Cross-Functional Collaboration: Strong communication skills with the ability to navigate complex enterprise IT ecosystems and work effectively with other teams and system owners to enforce endpoint security control compliance.
● Analytical Problem-Solving: Ability to think critically during issue / incident triage and perform root-cause analysis (For example: when troubleshooting endpoint security agent health issues).
● Adaptability & Time Management: Capable of balancing day-to-day operational support and incident ticket queues with long-term, enterprise-wide platform maturity efforts.

What Makes a Candidate Stand Out?
● Enterprise Platform Experience: Hands-on experience supporting enterprise-grade cybersecurity and/or IT systems management platforms and controls at scale.
● Familiarity with SIEM Query Languages: Working knowledge of one or more SIEM query language for querying endpoint telemetry data (e.g. SPL, KQL, CQL, or UDM Search/YARA-L).
● API Knowledge: Practical experience of using cybersecurity and/or IT systems management platform APIs for script development (e.g. for report generation and workflow automation).b

CME Group: Where Futures are Made

CME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it – all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more.

At CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.

Important Notice: Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process. Learn more here.