> Markdown version of [/jobs/ext/2003189-endpoint-security-engineer](https://www.wearedevelopers.com/jobs/ext/2003189-endpoint-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Endpoint Security Engineer

- **Company:** Ciena
- **Location:** Atlanta, GA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Apple Mac Systems, System Configuration, Linux, Log Analysis, Role-Based Access Control, Zero Trust Network Access, Security Information and Event Management, TCP/IP, Firewalls (Computer Science), CIS Benchmarks, Operating System Security, Vulnerability Analysis
- **Published:** August 9, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/endpoint-security-engineer-atlanta-ga-usa-58871395

## About the Role

_ standards * Consult internal teams on security requirements and risk-based remediation * Track project activities and document security controls, decisions, and status Tasks * 4+ years in cybersecurity/security engineering or similar * US Citizenship * Strong understanding of TCP/IP, OS security concepts, and hardening practices * Experience with EDR, host-based firewalls, SIEM, vulnerability assessment, and configuration baseline tools * Knowledge of CIS Benchmarks, NIST guidance, Zero Trust, least privilege * Strong attention to detail, analytical thinking, and problem-solving * Ability to work independently and with cross-functional teams * Knowledge of least privilege and Zero Trust in endpoint/server environments Key requirements * medical, dental, and vision plans * 401(k) with company matching * Employee Stock Purchase Program (ESPP) * Employee Assistance Program (EAP) * company-paid holidays * paid sick leave and vacation

## Description

Experteer Overview In this role you will design, test, and implement secure endpoint and server configurations to strengthen our security posture. You will collaborate across technical teams to maintain standards, enable secure operations, and drive risk-based improvements. You'll analyze logs, coordinate vendor support, and document controls and outcomes. This position sits within a people-first culture that values growth, well-being, and meaningful impact. You will help shape secure foundations for enterprise endpoints across Windows, macOS, and Linux. Compensation / Benefits * Design, test, and implement endpoint/server security configurations through change control * Administer and troubleshoot endpoint security platforms (EDR, host-based firewalls, related controls) * Analyze logs in SIEM to identify risks, trends, gaps, and improvements * Coordinate investigations with vendor support for security tools and platforms * Perform baseline analysis and implement hardening aligned with standards * Consult internal teams on security requirements and risk-based remediation * Track project activities and document security controls, decisions, and status Tasks * 4+ years in cybersecurity/security engineering or similar * US Citizenship * Strong understanding of TCP/IP, OS security concepts, and hardening practices * Experience with EDR, host-based firewalls, SIEM, vulnerability assessment, and configuration baseline tools * Knowledge of CIS Benchmarks, NIST guidance, Zero Trust, least privilege * Strong attention to detail, analytical thinking, and problem-solving * Ability to work independently and with cross-functional teams * Knowledge of least privilege and Zero Trust in endpoint/server environments Key requirements * medical, dental, and vision plans * 401(k) with company matching * Employee Stock Purchase Program (ESPP) * Employee Assistance Program (EAP) * company-paid holidays * paid sick leave and vacation


## Related Videos

- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)
- [Leveraging Large Language Models for Legacy Code Translation: Challenges and Solutions](https://www.wearedevelopers.com/videos/1157-leveraging-large-language-models-for-legacy-code-translation-challenges-and-solutions)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)