Senior Endpoint Detection Specialist

We're Hiring: Senior Endpoint Detection Specialist

Location:
United Arab Emirates (Remote) Employment Type: Full-Time Experience Level: Mid-Level to Senior Work Arrangement: Fully Remote

About Us
We are a construction-focused organization committed to delivering complex projects through operational excellence, effective risk management, secure technology infrastructure, and collaborative project delivery. Our distributed teams work across Project Management, Construction, Engineering, Procurement, Commercial, Legal, Finance, Human Resources, Design, Quality, HSE, Consultants, Contractors, Suppliers, Logistics, Administration, Information Technology, and Executive Leadership to support business continuity, protect sensitive information, and maintain reliable digital operations. As our technology environment continues to evolve, endpoint security plays a critical role in protecting corporate devices, project systems, remote workforces, and business-critical information against increasingly sophisticated cyber threats. We value professionals who combine strong technical expertise, analytical thinking, proactive threat detection, and disciplined incident handling to strengthen our security posture and reduce operational risk. The Role We are seeking an experienced Senior Endpoint Detection Specialist to design, administer, optimize, and maintain endpoint detection and response capabilities across the organization's enterprise environment. The successful candidate will be responsible for detecting, investigating, analyzing, and responding to suspicious endpoint activity, malicious processes, advanced persistent threats, ransomware, malware infections, credential theft, and other endpoint-related security incidents. This role will focus on endpoint detection and response (EDR), endpoint telemetry analysis, threat hunting, detection engineering, security alert triage, incident investigation, and continuous improvement of endpoint security controls. The specialist will collaborate with Security Operations, Incident Response, Infrastructure, Network, Cloud, Identity and Access Management, Application Support, and other technology teams to improve detection coverage, accelerate incident containment, and protect corporate workstations, servers, virtual desktops, cloud workloads, and other managed endpoints. The ideal candidate will bring hands-on experience with enterprise endpoint security platforms, endpoint telemetry, attack behavior analysis, security information and event management (SIEM) integration, threat intelligence, and established cybersecurity frameworks. The role requires a proactive approach to identifying security weaknesses, reducing false positives, improving detection accuracy, and ensuring that endpoint threats are investigated and addressed promptly.

Key Responsibilities
1. Endpoint Detection and Response Management Administer, configure, monitor, and optimize enterprise endpoint detection and response platforms across supported IT environments. Maintain endpoint security coverage across corporate workstations, laptops, servers, virtual desktops, remote devices, and supported cloud workloads. Deploy and maintain endpoint detection agents, sensors, and associated security components in accordance with approved deployment procedures. Monitor endpoint agent health, connectivity, policy compliance, telemetry ingestion, and detection functionality. Investigate endpoints with missing agents, outdated security components, disabled protections, reporting failures, or incomplete monitoring coverage. Maintain an accurate inventory of protected endpoints, operating systems, device ownership, security status, and assigned protection policies. Configure endpoint protection policies based on device type, operating system, business criticality, risk exposure, and operational requirements. Enforce appropriate endpoint security controls, including behavioral monitoring, malicious process detection, exploit prevention, and ransomware protection. Support endpoint isolation, process termination, file quarantine, and other authorized containment actions when required. Ensure endpoint security policies remain aligned with organizational standards, risk tolerance, and approved security architecture. Evaluate new platform capabilities and recommend improvements to detection, response, investigation, and reporting functions. Coordinate platform upgrades, configuration changes, agent updates, and policy deployments through established change management procedures. 2. Security Alert Monitoring and Triage Review, prioritize, and investigate endpoint security alerts generated by EDR, antivirus, endpoint protection, and related monitoring technologies. Assess alerts involving suspicious processes, malicious files, unauthorized scripts, unusual network connections, persistence mechanisms, and privilege escalation. Analyze alert context, including endpoint identity, user activity, process ancestry, command-line argu