L3 Endpoint Security Engineer

Overview: We are seeking a highly experienced and strategic L3 Endpoint Security professional to lead the technical design, deployment, and optimization of enterprise-grade security architectures. In this senior, customer-facing role, you will architect robust defenses across EDR, XDR, DLP, and Zero Trust frameworks, handling large-scale migrations and complex troubleshooting. If you excel at designing High-Level and Low-Level Designs (HLD/LLD), integrating sophisticated security platforms, and mentoring engineering teams to deliver uncompromising security standards, we want you to lead our frontline defenses. Total Experience: 6+ Years Job Skills: Strong experience delivering enterprise endpoint security projects for large organizations. Experience with large-scale endpoint migrations involving thousands of endpoints. Strong understanding of endpoint attack techniques, threat hunting, and incident response. Experience integrating endpoint security solutions with SOC, SIEM, SOAR, IAM/PAM, and vulnerability management platforms. Knowledge of regulatory and compliance frameworks such as ISO 27001, PCI DSS, NIST CSF, RBI, SEBI, and CIS Controls. Ability to lead design workshops, architecture discussions, and customer technical reviews. Soft Skills Excellent technical leadership and mentoring skills. Strong customer engagement and stakeholder management. Excellent analytical and problem-solving capabilities. Strong technical documentation and presentation skills. Ability to manage multiple concurrent projects. Excellent communication and interpersonal skills. Ability to work under pressure in complex enterprise environments while maintaining high-quality delivery standards. Job Technologies: Endpoint Protection Platform (EPP), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), Anti-APT and Advanced Malware Protection Mobile Device Management (MDM), Mobile Threat Protection (MTP) Secure Web Gateway / Proxy Solutions, Data Loss Prevention (DLP), Data Security Posture Management (DSPM) Email Security (Secure Email Gateway, Anti-Phishing, Anti-Spam) Device Control and Application Control, Endpoint Encryption, Host Firewall Management Endpoint Hardening and Compliance, Zero Trust Security Architecture Preferred OEM Experience Trend Micro Vision One / Apex One Palo Alto Cortex XDR Check Point Harmony Endpoint Forcepoint DLP and Web Security Additional Technical Knowledge MITRE ATT&CK Framework CIS Benchmarks & Zero Trust Architecture PKI and Digital Certificates PowerShell and Python scripting VMware and Hyper-V virtualization Microsoft Azure and AWS security fundamentals Responsibilities: Lead the technical design and implementation of enterprise Endpoint Security solutions. Review High-Level Design (HLD) and prepare or validate Low-Level Design (LLD), implementation plans, migration strategies, rollback procedures, and acceptance criteria. Lead deployment, migration, upgrade, and optimization of endpoint security platforms across enterprise environments. Design and deploy EPP, EDR, XDR, Anti-APT/Malware, MDM, MTP, Proxy, DLP, DSPM, and Email Security solutions across enterprise environments. Develop endpoint security policies aligned with Zero Trust principles, CIS Benchmarks, and enterprise security standards. Lead customer workshops, design reviews, technical discussions, and solution demonstrations. Perform advanced troubleshooting, root cause analysis, and performance tuning of endpoint security platforms. Coordinate with OEM Technical Assistance Centers (TAC) for complex product issues and feature enablement. Conduct solution validation, pilot testing, User Acceptance Testing (UAT), production cutover, and operational handover. Prepare detailed technical documentation, implementation guides, SOPs, LLDs, HLD reviews, and knowledge transfer documentation. Provide technical leadership, mentoring, and guidance to L1/L2 engineers. Ensure project delivery meets customer requirements, security best practices, and agreed timelines. Note: Preferred Certifications .