Endpoint Security Engineer

BNY Mellon•Pittsburgh, PA

8h•$120,000 - $218,000•Hybrid

About The Position

The Endpoint Security Engineer is responsible for the engineering, configuration, and operational support of endpoint security capabilities across user endpoints and server assets, including physical and virtual environments. This role provides hands-on technical depth across the endpoint security ecosystem, supports policy and architectural direction, identifies gaps and emerging risks, and contributes to the long-term roadmap for tooling and capabilities across the enterprise.

Requirements

8-12 years of experience in cybersecurity or infrastructure with demonstrated depth and breadth in endpoint security concepts and enterprise tooling ecosystems.
Bachelor's degree required
Ability to collaborate effectively and drive alignment across diverse technical and organizational stakeholders.
Strong understanding of security architecture, control frameworks, and endpoint engineering best practices.
Hands-on experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, or equivalent EDR/EPP solutions.
Excellent communication and synthesis skills, capable of producing clear technical documentation and executive-ready insights.

Nice To Haves

Master's degree preferred

Responsibilities

Maintain a comprehensive, current-state understanding of endpoint security posture across workstations, laptops, and server assets in on premises and virtualized environments.
Partner with technology, cybersecurity, risk, and platform teams responsible for endpoint and server security capabilities.
Provide integrated views and insights into coverage, maturity, and alignment across the endpoint security portfolio.
Contribute to the development and evolution of enterprise endpoint security standards and reference architectures spanning both user endpoints and server environments.
Partner with enterprise architecture and control teams to define target-state capabilities and consistent security expectations across heterogeneous endpoint platforms.
Ensure architectural direction reflects evolving threats, regulatory expectations, and enterprise technology strategy.
Design, implement, and maintain endpoint security configurations, policies, and detection rules across enterprise tooling platforms.
Identify material gaps, misalignments, or risk concentrations across endpoint and server security capabilities.
Coordinate stakeholders to assess issues, align on remediation approaches, and elevate risks appropriately through governance channels.
Support leadership and risk forums with clear articulation of endpoint security posture and priority concerns.
Contribute to the endpoint security strategic roadmap, encompassing capability evolution, technology lifecycle planning, and portfolio rationalization.
Evaluate and recommend tool selection, capability introduction, and de-duplication across endpoint and server security platforms.
Support investment planning and sequencing to ensure endpoint security capabilities advance cohesively and at enterprise scale.
Perform hands-on engineering work including tool deployment, integration, tuning, and troubleshooting across endpoint and server security platforms.