Skip to main content

GuidePoint Security

Endpoint Security Engineer

Falls Church, VAmidAdded today

About this role

GuidePoint Security seeks an experienced Endpoint Security Engineer to design, deploy, and manage advanced EDR/XDR solutions across a massive distributed fleet of 600,000+ endpoints spanning retail, logistics, and cloud environments. You'll balance proactive threat detection with business continuity by tuning policies with application owners and providing expert-level escalation support to SOC and IT operations teams during active incidents.

What you'll do

  • Engineer, deploy, and maintain NGAV and EDR/XDR agents (CrowdStrike Falcon, Microsoft Defender, SentinelOne) across hundreds of thousands of heterogeneous endpoints
  • Collaborate with application owners to establish behavioral baselines, manage allowlisting, and execute phased deployments to minimize false positives and operational disruption
  • Provide tier-3/tier-4 escalation support to SOC analysts and IT administrators during high-severity threat investigations and remediation efforts
  • Perform advanced host forensics, process-tree reconstruction, memory analysis, and live remediation including host isolation and automated artifact collection
  • Extend endpoint security standards across private data center virtualization (VMware/Nutanix) and multi-cloud infrastructure (AWS, Azure, GCP)
  • Measure control efficacy using breach attack simulation (BAS) tools and Purple Team exercises; track agent health, tamper-resistance, and coverage metrics

What they're looking for

  • EDR/XDR platform administration (CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne)
  • Host forensics and incident response (process-tree analysis, memory analysis, artifact collection)
  • Enterprise endpoint policy tuning and allowlisting workflows
  • Cloud infrastructure security (AWS, Azure, GCP)
  • Virtualization platform security (VMware, Nutanix, container environments)
  • Behavioral threat detection and behavioral-based malware protection
  • Breach attack simulation (BAS) and Purple Team exercise execution
  • Cross-functional collaboration and technical stakeholder management
Apply with Autofill

Opens the application — the Jobs AI extension fills it for you. Set up autofill

Opens the official application on the employer’s site. No login required.

GuidePoint Security

GuidePoint Security builds and deploys security infrastructure and automation solutions for federal government, intelligence community, and enterprise clients. The company is hiring for specialized security engineering roles including cloud security architects, network security engineers, Linux automation specialists, and security operations professionals with expertise in platforms like Splunk, Zscaler, and firewall technologies.

View all jobs at GuidePoint Security

Likely interview questions

  • Walk us through your experience managing EDR/XDR deployments across 50,000+ endpoints—what were the key challenges and how did you address them?
  • Describe a time when you had to balance aggressive security controls with business continuity—how did you work with application owners to tune policies?
Unlock all 7 questions free — and practice them live →