> Markdown version of [/jobs/ext/4444019-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/4444019-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Endpoint Engineer

- **Company:** FIVE IRON, INC.
- **Location:** Franklin, TN, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Antivirus Softwares, Apple Mac Systems, Software System Penetration Testing, Cyber Security, Information Systems, Data Security, Linux, Internet Security, Network Administration, ArcSight SIEM Tool, Security Information and Event Management, Wireshark, Forensic Toolkit, Scripting, QRadar, Malware, Falcon Platform, Information Technology, Metasploit, Cybercrime, Encase, Splunk, SentinelOne Expertise, Vmware
- **Published:** October 31, 2026
- **Apply:** https://www.careerbuilder.com/job-details/endpoint-engineer-franklin-tn--21f0ed63-ce2e-4b51-9335-020839de6d0d

## About the Role

* Expertise in Application Control (WDAC, Carbon Black Application Control)
 * Experience with endpoint security tools, Nextgen Anti-Virus (NGAV), and Endpoint Detection and Response (EDR)
 * Experience with APIs as they relate to security tools.
 * Proficiency with three or more of the below:
 + Threat Hunting.
 + SIEM and Log Management experience (Splunk, IBM QRadar, HP ArcSight, LogRhythm, Stellar Cyber, etc.).
 + Analysis and Forensic Tools (FTK, EnCase, ProcMon, WireShark, etc.).
 + Malware sandboxing experience.
 + Penetration Testing Tools (Metasploit, Kali, Atomic Red Canary, etc.).
 + IOC Management., * BS/BA degree in Computer Science, Information Systems, related discipline, or equivalent experience.
 * 3-5 years of professional work experience in the cybersecurity industry.
 * The ideal candidate will have macOS and Windows operating system experience, as well as scripting skills. Linux/Unix skills are a plus.
 * Strong analytical skills to define risk, identify potential threats, and develop and document action/mitigation plan.
 * Strong interpersonal skills, ability to mentor/train staff and bring awareness to current and emerging threats.
 * Ability to work efficiently and self-motivate with little to no supervision.
 * Certification/training a plus: CISSP, SAN GIAC Certifications (GCIH, GPEN, GSEC, etc.), CompTIA (Security+, CYSA+, etc.), Carbon Black/VMware, Crowdstrike, SentinelOne, etc.
 * Strong written and verbal communications skills with an ability to present technical risks and issues to technical and non-technical audiences internal and external to the organization.
 * Regulatory experience is a plus (GDPR, ISO27K, SSAE16, HIPAA, PCI, FISMA, etc.).

## Description

* Analyze and monitor endpoint platforms for security risks to detect and act as escalation point for advanced threats/issues.
 * Perform security event triage and initial incident response to detected threats.
 * Assist other groups by providing endpoint log and troubleshooting information to resolve production issues.
 * Regularly plan and update/create endpoint policies or controls as needed to enhance security.
 * Identify potential gaps and offer solutions to include internal team needs, product improvements and client security postures.
 * Communicate and enforce Information Security policies.
 * Coordinates with other team members and management to investigate, document and report incidents.
 * Regularly create and maintain high quality documentation for knowledgebases, changes, and procedures.
 * Collaborate with our Threat Analysis Unit to provide in depth reports of confirmed security incidents and produce technical threat advisory broadcasts about new and emerging threats.
 * Assist/lead new endpoint product implementation to clients.