Engineer II - Endpoint Protection Security

Description

The Protect Platform comprises teams across North America that protect customers, colleagues and shareholders from cyber and financial crime and fraud, and that set the company's enterprise fraud, cyber threat and technology risk strategy.

Endpoint Protect sits within Security Engineering. It plans, evaluates, designs, rolls out and supports security solutions for servers and workstations that meet enterprise and industry standards.

The work keeps those endpoints protected against the latest and most advanced cyber attacks.

This is a senior role centred on hands-on engineering, design, delivery and ongoing improvement of endpoint security across the enterprise. It includes technical leadership of a small group of engineers and influence over technical direction across several stakeholder groups.

Candidates of interest are contacted to schedule an interview, and outcomes are shared by email or phone.

Responsibilities

• Lead the design, build and continuous evolution of enterprise endpoint security so that solutions scale, hold up under load and fit security and business goals.
• Act as the subject matter expert for endpoint tools such as EDR, anti-malware, file integrity monitoring, security automation, threat intelligence and related platforms.
• Make sure each solution has the operational processes, integrations, documentation and governance it needs for smooth enterprise adoption and day-to-day running.
• Raise platform maturity and efficiency through automation, scripting, sound engineering practice and continuous improvement work.
• Lead or contribute to complex projects by defining requirements, weighing risks, proposing options and delivering outcomes that meet business and security needs.
• Work with architects, engineers and technology partners to assess the current state and recommend the future state.
• Coordinate priorities, dependencies, risks and stakeholder updates to keep initiatives and team goals on track.
• Build lasting relationships with Security Operations, Threat Intelligence, Red Team, Blue Team, Threat Hunting and other technology teams.
• Advise governance, compliance, audit, operational risk and regulatory stakeholders on endpoint security technologies and controls.
• Support vendor work, including evaluations, business cases, RFI and RFP activity, service reviews and contract discussions.
• Give day-to-day technical direction to a small engineering group: coordinate their work, mentor them, review approaches, clear blockers and drive priorities to completion.
• Keep up with emerging threats, technologies and industry trends, and look for ways to strengthen security capabilities.
• Lead or support infrastructure changes, platform upgrades and incident response, including after-hours or weekend work when required.

Requirements

• Extensive hands-on experience designing, implementing and supporting enterprise endpoint platforms, including EDR, anti-malware, file integrity monitoring, threat intelligence, security automation and related capabilities.
• Familiarity with enterprise security products such as CrowdStrike, Microsoft Defender, Qualys File Integrity Monitoring, Cortex XSOAR or comparable tools.
• Solid skills in systems administration, troubleshooting, scripting, automation and performance analysis on Windows and Linux.
• macOS experience is an asset.
• A good grasp of application, endpoint, identity, infrastructure and network security principles and common controls across enterprise technology.
• Experience designing and supporting security solutions in cloud and hybrid setups on Microsoft Azure, AWS or Google Cloud Platform.
• Knowledge of containers, microservices, infrastructure as code, automation, DevSecOps and cloud-native architecture.
• A proven record of resolving complex application, infrastructure and network security issues in large enterprise environments.
• Experience leading engineering staff: coordinating work, mentoring, reviewing technical approaches, removing blockers and driving priorities to completion.
• Experience leading cross-team initiatives, making technical decisions, managing risk and dependencies and delivering across several teams.
• Strong communication and stakeholder skills, with the ability to engage both technical and non-technical audiences.
• Familiarity with AI-enabled technologies and the security risks of AI and large language models, including prompt injection and data leakage.
• Strong analytical and problem-solving skills, with a record of learning independently and keeping pace with new technology.

Conditions

Based in Toronto, Ontario, Canada.

Hours field listed as: 5.

Line of business: Technology Solutions.

Base salary range is $96,900 to $136,800 CAD.

Actual base pay may vary based on skills, experience, job knowledge, geographic location and business needs.

Candidates are encouraged to ask about compensation and discuss details with the recruiter.

This job is subject to provincial regulation for employment purposes, and each province or territory in Canada may have its own rules.

Benefits

• Total rewards include base salary, variable compensation, health and well-being benefits, savings and retirement plans, paid time off, banking benefits and discounts, career development, and recognition programs.
• Regular career, development and performance conversations with your manager.
• Access to an online learning platform and several mentoring programs.
• Training and onboarding sessions to prepare you for the role.