Lead Endpoint Cybersecurity Engineer

TIAA • Frisco, TX

1d • Onsite

About The Position

The Lead Endpoint Cybersecurity Engineer is a senior technical engineering role responsible for designing, deploying, maintaining, testing, troubleshooting, and continually improving enterprise endpoint cybersecurity technologies. The engineer provides technical leadership across endpoint security platforms and supporting infrastructure to ensure applications are stable, performant, integrated, and capable of operating at enterprise scale. The role includes leading endpoint engineering for an enterprise cyber deception capability and the technical evaluation and implementation of an endpoint-based AI Detection and Response capability intended to identify and respond to emerging AI and agentic-AI threats.

The position supports endpoint cybersecurity technologies across Windows, macOS, Linux, VDI, and server environments as applicable. It includes senior-level troubleshooting and problem management, endpoint application lifecycle activities, deployment and regression testing, technical documentation, automation, and coordination of complex incidents with cybersecurity, infrastructure, desktop engineering, vendors, and application owners. The engineer also validates endpoint integrations with enterprise monitoring and response systems, assesses endpoint performance and agent interoperability, and ensures implementations meet architecture, privacy, security, change-management, and production-safety requirements.

Requirements

• At least 5 years of experience with security technology proof-of-concepts, product evaluations, and production deployments.
• Hands-on experience engineering and supporting enterprise deception or other endpoint cybersecurity solutions.
• At least 5 years of work experience required.
• University degree preferred.
• Physical requirements are classified as sedentary work.

Nice To Haves

• At least 7 years of work experience preferred.
• Understanding of Zero Trust, endpoint hardening, security baselines, vulnerability management, and incident response.
• Experience conducting endpoint application performance, compatibility, stability, and regression testing.
• Technology, engineering, or equivalent professional experience.
• CISSP, GIAC, Microsoft security certifications, CrowdStrike certifications, or comparable industry certifications.
• Experience translating security architecture and risk requirements into endpoint engineering implementations.
• Experience testing multiple concurrent cybersecurity agents for performance and interoperability.
• Previous technical leadership or mentoring experience.

Responsibilities

• Serve as a technical lead for enterprise endpoint cybersecurity technologies across Windows, macOS, Linux, VDI, and server environments, as applicable.
• Design, configure, deploy, maintain, upgrade, and troubleshoot endpoint cybersecurity applications and agents.
• Provide senior-level break/fix and problem-management support, including root-cause analysis of application failures, agent health issues, policy conflicts, deployment or integration failures, and endpoint instability.
• Perform application lifecycle activities, including upgrades, configuration changes, policy tuning, regression testing, deployment validation, and rollback planning.
• Develop technical standards, runbooks, operating procedures, implementation documentation, and support documentation.
• Identify opportunities to automate through scripting, APIs, configuration-management platforms, and other engineering mechanisms.
• Troubleshoot agent installation, upgrade, communication, policy, interoperability, and stability issues.
• Coordinate complex incidents with cybersecurity, infrastructure, desktop engineering, vendors, and application owners.
• Identify conflicts between existing and proposed cybersecurity agents.
• Perform stability, coexistence, upgrade, rollback, failure-mode, and regression testing; document findings and provide technical go/no-go recommendations before production deployment.
• Establish performance monitoring following initial deployment waves.
• Engineer endpoint components of the enterprise Deception Framework across supported workstation and server populations.
• Perform proof-of-concept and production-readiness testing for deception capabilities.
• Validate deceptive files, credentials, registry artifacts, sessions, processes, and other endpoint lures for approved use cases.
• Test failure conditions and confirm endpoint stability when deception components are unavailable or impaired.
• Validate integration of deception telemetry with enterprise security monitoring and response systems.
• Support deployment waves and troubleshoot endpoint installation, communications, configuration, and operational issues.
• Develop deployment procedures, engineering standards, configuration documentation, troubleshooting guides, and operational runbooks for deception capabilities.
• Assist with tuning and continuous improvement following production deployment.
• Ensure endpoint implementation adheres to architecture, privacy, security, change-management, and production-safety requirements.
• Validate integration with existing EDR/XDR, SIEM, SOAR, identity, and security operational workflows.
• Conduct controlled performance testing to quantify CPU, memory, and other endpoint overhead.
• Lead endpoint engineering and technical implementation activities for evaluating and deploying an endpoint-based AI Detection and Response capability for emerging AI and agentic-AI threats.

Benefits

• A superior retirement program.
• Competitive health, wellness, and work-life offerings.
• A comprehensive Total Rewards package supporting physical, emotional, and financial well-being.
• The compensation package may include participation in an incentive program linked to performance, depending on the role.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior