Endpoint Security Engineer

Ciena Government Solutions•Baltimore, MD

23h•$101,600 - $145,000•Remote

About The Position

As the global leader in high-speed connectivity, Ciena is committed to a people-first approach. Our teams enjoy a culture focused on prioritizing a flexible work environment that empowers individual growth, well-being, and belonging. We’re a technology company that leads with our humanity—driving our business priorities alongside meaningful social, community, and societal impact. Security Engineering plays a critical role in protecting enterprise endpoint and server environments across Windows, macOS, and Linux platforms. This position drives secure configuration management, system hardening, and endpoint security enablement while balancing operational resilience and risk reduction. The role partners across technical teams to maintain consistent security engineering standards and strengthen the organization’s security posture.

Requirements

4+ years of cybersecurity, security engineering, infrastructure security, or endpoint/server security experience.
Must be a US Citizen.
Application of TCP/IP networking concepts, operating system security concepts, and endpoint/server hardening practices.
Experience supporting EDR, host-based firewall, SIEM, vulnerability assessment, and configuration baseline tools, including log analysis and troubleshooting.
Application of security configuration standards and frameworks, including CIS Benchmarks, NIST guidance, Zero Trust, and least privilege principles.
Demonstrated attention to detail, analytical thinking, and problem-solving skills.
Ability to work independently and collaboratively across technical teams.
Application of least privilege and Zero Trust access control principles across endpoint and server environments.

Nice To Haves

Experience identifying automation opportunities for recurring security tasks and operational efficiency improvements.
Experience promoting secure practices and security engineering standards across an enterprise environment.
Experience with scripting or automation.
Ability to support after-hours maintenance activities as needed during US Eastern business operations.

Responsibilities

Design, test, and implement endpoint and server security configuration changes through established change control processes.
Administer, troubleshoot, and maintain endpoint security platforms, including EDR solutions, host-based firewalls, and related security controls.
Analyze system, endpoint, and security event logs within SIEM platforms to identify risks, trends, control gaps, and improvement opportunities.
Coordinate investigations and issue resolution activities with vendor support teams for security tools and platforms.
Execute baseline analysis activities and implement system hardening enhancements aligned with approved security standards.
Consult with internal teams on security requirements, configuration concerns, and risk-based remediation approaches.
Track project activities and document security controls, configuration decisions, testing outcomes, and implementation status.