Overview: We are seeking a skilled IT Security Engineer to manage patching, endpoint security, and automation across our infrastructure. The ideal candidate will be responsible for implementing security measures, ensuring compliance, and optimizing system performance through proactive security initiatives.

Key Responsibilities:

Patch Management:

Develop and implement an effective patching strategy for Windows, Linux, and third-party applications.

Utilize Endpoint Central (ManageEngine) to deploy patches, track compliance, and troubleshoot failures.

Coordinate with teams to test and schedule patch rollouts with minimal business impact.

Generate patch compliance reports and remediate non-compliant systems.

Endpoint Central Management:

Administer and optimize ManageEngine Endpoint Central for device management, patching, and software deployment.

Monitor system health, enforce policies, and manage endpoint security configurations.

Automate routine endpoint tasks using custom scripts.

CrowdStrike Antivirus Management:

Deploy, configure, and manage CrowdStrike Falcon for endpoint protection.

Monitor security s, analyze threats, and take remediation actions.

Ensure endpoint devices comply with security standards and company policies.

Collaborate with SOC teams to investigate security incidents and fine-tune detection rules.

Scripting & Automation:

Develop and maintain PowerShell, Python, or Bash scripts to automate patching, compliance checks, and endpoint management tasks.

Create dashboards and reports for patch status, endpoint security, and compliance tracking.

Optimize security operations through custom automation solutions.

Required Skills & Qualifications:

3+ years of experience in IT security, patch management, and endpoint protection.

Hands-on experience with ManageEngine Endpoint Central for endpoint and patch management.

Strong knowledge of CrowdStrike Falcon or similar EDR/XDR solutions.

Proficiency in scripting (PowerShell, Python, or Bash) for automation and system management.

Understanding of vulnerability management tools (Qualys, Nessus, Tenable, etc.).

Familiarity with compliance frameworks like ISO 27001, NIST, or CIS benchmarks.

Strong troubleshooting, analytical, and communication skills.

Preferred Qualifications:

Experience in security hardening and compliance auditing.

Knowledge of cloud-based security solutions.

Relevant certifications such as CISSP, CISM, CEH, or Security+.