Lead Endpoint Cybersecurity Engineer

Lead enterprise endpoint cybersecurity with a role focused on real-world deployment, validation, and continuous improvement at scale. This onsite position in Dallas, TX supports two strategic technology efforts: an Enterprise Deception Framework and an AI Detection and Response (AIDR) capability. You will provide technical leadership across endpoint platforms and partner with cybersecurity, infrastructure, desktop engineering, vendors, and application owners to drive stable, production-ready outcomes.

Responsibilities

• Serve as a technical lead for enterprise endpoint cybersecurity technologies across Windows, macOS, Linux, VDI, and applicable server environments.
• Design, configure, deploy, maintain, upgrade, and troubleshoot endpoint cybersecurity applications and agents.
• Provide senior break/fix and problem-management support, including root-cause analysis for application failures, agent health issues, policy conflicts, deployment failures, integration failures, and endpoint instability.
• Own application lifecycle activities such as upgrades, configuration changes, policy tuning, regression testing, deployment validation, and rollback planning.
• Develop technical standards, runbooks, operating procedures, implementation documentation, and support documentation.
• Identify automation opportunities using scripting, APIs, configuration-management platforms, and other engineering mechanisms.
• Troubleshoot agent installation, upgrade, communication, policy, interoperability, and stability issues.
• Coordinate complex incidents with cybersecurity, infrastructure, desktop engineering, vendors, and application owners.
• Identify conflicts between existing and proposed cybersecurity agents and validate coexistence.
• Perform stability, coexistence, upgrade, rollback, failure-mode, and regression testing.
• Document findings and provide technical go/no-go recommendations prior to production deployment.
• Establish endpoint performance monitoring following initial deployment waves.
• Engineer endpoint components of the Deception Framework across supported workstation and server populations, including proof-of-concept and production-readiness testing.
• Validate deceptive files, credentials, registry artifacts, sessions, processes, and related endpoint lures as appropriate to approved use cases.
• Test failure conditions to confirm endpoint stability when deception components are unavailable or impaired.
• Validate Deception telemetry integration with enterprise security monitoring and response systems.
• Support deployment waves and troubleshoot installation, communications, configuration, and endpoint-side operational issues.
• Ensure endpoint implementation adheres to architecture, privacy, security, change-management, and production-safety requirements.
• Validate integration with existing EDR/XDR, SIEM, SOAR, identity, and security operational workflows.
• Conduct controlled performance testing to quantify CPU, memory, and other endpoint overhead.
• Lead endpoint engineering activities to deploy, integrate, validate, operate, and optimize the company’s enterprise cyber deception capability.
• Lead endpoint engineering and technical implementation activities for evaluating and deploying an endpoint-based AI Detection and Response capability to identify and respond to emerging AI and agentic-AI threats.

Requirements

• University (Degree) Preferred
• 5+ years required; 7+ years preferred
• 5+ years experience with security technology POCs, product evaluations, and production deployments.
• Hands-on experience engineering and supporting enterprise deception or other endpoint cybersecurity solutions.
• Understanding of Zero Trust, endpoint hardening, security baselines, vulnerability management, and incident response.
• Experience conducting endpoint application performance, compatibility, stability, and regression testing.
• Technology, Engineering, or equivalent professional experience.
• Certifications: CISSP, GIAC, Microsoft security certifications, CrowdStrike certifications, or comparable industry certifications.
• Experience translating security architecture and risk requirements into endpoint engineering implementations.
• Experience testing multiple concurrent cybersecurity agents for performance and interoperability.
• Previous technical leadership or mentoring experience.

Tech Stack

Windows, macOS, Linux, VDI, EDR/XDR, SIEM, SOAR, identity, CISSP, GIAC, Microsoft security certifications, CrowdStrike certifications.

Additional Information

• Location: Dallas, TX (onsite)
• Base Pay Range: $124,000/yr - $154,000/yr
• Career Level: 8IC
• Physical Requirements: Sedentary Work
• Anticipated Posting End Date: 2026-10-30