> Markdown version of [/jobs/ext/2290998-senior-endpoint-security-engineer-13-years-crowdstrike-falcon-microsoft-defender-sentinelone](https://www.wearedevelopers.com/jobs/ext/2290998-senior-endpoint-security-engineer-13-years-crowdstrike-falcon-microsoft-defender-sentinelone). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Endpoint Security Engineer (13+ years, CrowdStrike Falcon, Microsoft Defender, SentinelOne)

- **Company:** Triangle, Inc
- **Location:** Raleigh, NC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Antivirus Softwares, Microsoft Antivirus, Bash Shell, Cyber Security, Information Systems, Computer Programming, Computer Networks, Query Languages, Python (Programming Language), Machine Learning, Windows PowerShell, Kusto Query Language, Security Information and Event Management, SQL Databases, EndPointSecurity, Cyber Threat Analysis, Information Technology, Cybercrime, Splunk, SentinelOne Expertise
- **Published:** August 29, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3369290886&tx=CT3533TTI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* U.S. Citizenship required.
 * 13+ years of relevant experience in cybersecurity engineering or infrastructure security roles.
 * Experience with enterprise-grade EDR/XDR platforms (CrowdStrike Falcon, Microsoft Defender, and/or SentinelOne SIEM) across extensive endpoint environments
 * Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience (17 years total).
 * Proficiency in administering endpoint platforms across various operating systems.
 * Expertise in behavioral analysis, threat hunting, and using query languages like SQL, KQL, and YARA.
 * Strong programming skills in PowerShell, Python, or Bash for automation.
 * Fluency in using AI/ML technologies to automate security activities.
 * Ability to balance security controls with business operations, ensuring minimal disruption.
 * Experience in crisis leadership, operational scale management, and policy automation.

Preferred:

 * GIAC Certified Enterprise Defender (GCED), GCIH, or GCFA certification.
 * CISSP certification.
 * Vendor-specific credentials, such as CrowdStrike Certified Falcon Administrator or Microsoft Certified: Security Operations Analyst Associate.

## Description

* Engineer, deploy, and maintain Next-Gen Antivirus (NGAV) and Endpoint Detection & Response (EDR/XDR) agents across a diverse range of endpoints.
 * Implement behavioral protections against zero-day malware and advanced persistent threats.
 * Collaborate with application owners and business units to establish baseline behavior profiles.
 * Manage allowlisting, exception workflows, and phased ring deployments to ensure seamless protection.
 * Support SOC investigations and collaborate with system owners for enterprise security.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions)