Endpoint Security Specialist

Job summary

You will administer endpoint security platforms, investigate alerts, and coordinate threat containment and remediation efforts. Additionally, you will conduct proactive threat hunting and maintain security policies across workstations and servers.

Job details

Have hands-on experience with CrowdStrike Falcon, Microsoft Defender for Endpoint and/or SentinelOne? Join Bell Cyber and help protect our organization and customers against evolving cyber threats. About the role As an Endpoint Security Specialist, you’ll administer endpoint security platforms, investigate threats, and strengthen protection across workstations and servers. Working closely with our Cyber Intelligence Centre (CIC), IT teams and customers, you’ll support threat detection, containment and remediation. What you’ll do Deploy, configure and maintain endpoint security platforms, ensuring agent health, protection coverage and effective security policies. Investigate endpoint alerts, analyze suspicious activity and coordinate containment, remediation and recovery. Conduct proactive threat hunting and refine detection queries and rules. Tune security policies, manage approved exceptions and troubleshoot performance or compatibility issues. Integrate endpoint telemetry and workflows with SIEM, ticketing and automation tools, maintaining accurate records in ServiceNow. Support endpoint hardening, customer onboarding, technical documentation and operational reporting. What you bring Typically 3+ years of relevant cybersecurity or endpoint administration experience. Hands-on administration and operational experience with at least one of CrowdStrike Falcon, Microsoft Defender for Endpoint or SentinelOne. Experience with multiple platforms is preferred. Experience deploying agents, managing policies, investigating alerts and supporting incident response. Practical knowledge of Windows endpoint and server security; macOS and Linux experience is an asset. Understanding of EDR, malware, ransomware, attacker techniques and the incident response lifecycle. Ability to use query languages or scripting tools such as KQL, PowerShell or Python for investigations, reporting or automation. Strong troubleshooting, communication and documentation skills. Post-secondary education in cybersecurity, IT, computer science or a related discipline, or equivalent practical experience. Experience in an MSSP, SOC or enterprise security environment, along with relevant vendor training or cybersecurity certifications, is an asset. Interested in joining Bell Cyber? Apply with your résumé and highlight your hands-on endpoint security experience.

What you’ll do

You will administer endpoint security platforms, investigate alerts, and coordinate threat containment and remediation efforts. Additionally, you will conduct proactive threat hunting and maintain security policies across workstations and servers.

Requirements

Candidates must have 3+ years of cybersecurity experience and hands-on proficiency with at least one major endpoint security platform. Strong knowledge of Windows security, scripting languages, and incident response lifecycles is required.

Listed skills

• Python · Preferred
• Technical Documentation · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• CrowdStrike Falcon
• Microsoft Defender for Endpoint
• SentinelOne
• Endpoint Security
• Threat Hunting
• Incident Response
• KQL
• PowerShell
• Python
• ServiceNow
• SIEM
• Windows Security
• Malware Analysis
• Ransomware Protection
• Technical Documentation

Job areas

• Security & Safety
• Technology
• Software

More jobs from Bell Cyber