[Remote] Security Engineer - Network

Note: The job is a remote job and is open to candidates in USA. Daybright Financial is an independent firm specializing in employee benefits, retirement plans, and associated compliance needs. The Security Engineer - Network designs, implements, and operates endpoint security controls across workforce and server endpoints, partnering with Security Operations, IT, IAM, and Infrastructure teams to reduce risk and support secure business operations. The role focuses on endpoint protection, detection, hardening, incident response, vulnerability remediation, and audit support.

Responsibilities

• Administer and tune endpoint protection platforms, including EPP, EDR, and XDR capabilities, to improve coverage and alert quality
• Work with Daybright's outside Security Operations Center to identify improvements and reduce false positives
• Build and maintain endpoint detection content, triage workflows, and investigation playbooks
• Develop and enforce endpoint hardening baselines aligned to business needs and recognized security standards
• Partner with IT operations to deploy secure endpoint configurations using enterprise device management tooling
• Monitor endpoint threats and coordinate containment, eradication, and recovery actions for endpoint security events
• Drive endpoint vulnerability and patch remediation workflows with clear prioritization and SLA tracking
• Investigate endpoint incidents and perform root cause analysis, including documented corrective and preventive actions
• Improve endpoint telemetry quality, asset inventory accuracy, and control coverage reporting
• Support internal and external audits with endpoint security control evidence, process documentation, and control narratives
• Contribute to endpoint security roadmap planning, tooling evaluations, and automation initiatives

Skills

• • 5-7 years of experience operating enterprise endpoint security controls in production environments
• • Practical understanding of endpoint attack techniques, containment methods, and recovery approaches
• • Working knowledge of endpoint security controls across Windows and macOS environments; Linux exposure is beneficial
• • Experience with endpoint vulnerability remediation and patch governance coordination
• • Familiarity with scripting or automation concepts used in security operations and endpoint administration
• • Ability to communicate technical risk, findings, and recommendations to both technical and non-technical stakeholders
• • Familiarity with security frameworks such as NIST, CIS Controls, or ISO 27001
• • Experience in financial services or another regulated industry preferred
• • Experience with SentinelOne EDR platform preferred
• • Experience with the Microsoft endpoint security stack, including Microsoft Defender preferred
• • Experience integrating endpoint telemetry with SIEM and security operations workflows preferred
• • Experience with threat hunting, detection engineering, or behavior-based detection tuning preferred
• • Experience with device compliance, data protection, and zero-trust endpoint control patterns preferred
• • Relevant certifications or equivalent practical expertise in endpoint security or cybersecurity operations preferred

Company Overview