> Markdown version of [/jobs/ext/4627278-lead-ai-endpoint-security-automation-engineer](https://www.wearedevelopers.com/jobs/ext/4627278-lead-ai-endpoint-security-automation-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead AI & Endpoint Security Automation Engineer - **Company:** IDR, Inc. - **Location:** Irving, TX, United States (Remote available) - **Experience:** Expert - **Salary:** $166,400.0 - $176,800.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Apple Mac Systems, Computer Programming, Continuous Integration, Linux, DevOps, Python (Programming Language), Software Engineering, DevOps Tools - Open-source, Large Language Models, Agentic-AI, Build Management, Kubernetes, Model Context Protocol, Terraform, Docker, Security Orchestration, Automation & Response - **Published:** November 7, 2026 - **Apply:** https://www.careerbuilder.com/job-details/lead-ai-endpoint-security-automation-engineer-irving-tx--9972b638-7450-4823-a902-75cacb5a380b ## About the Role Endpoint Security, Automation Engineering, Artificial Intelligence (AI), Artificial Intelligence (AI), Microsoft Windows Operating System, Automation Engineering, Linux Operating System, Endpoint Security, Mac Operating System, Automation, * 7+ years of hands-on software engineering / automation experience in production environments * Strong programming ability in Python (preferred) and/or Go, with a focus on automation and integration work * AI/LLM engineering experience, including agentic frameworks and applied use cases in automation * Experience with Model Context Protocol (MCP) and building tool-using/agent workflows * Endpoint security telemetry + EDR/XDR integrations and security API experience (e.g., CrowdStrike Falcon), plus DevOps tooling (Docker, Kubernetes, Terraform, CI/CD) ## Description * Design and build AI-enabled security automation to improve incident response speed and consistency * Develop autonomous/agentic workflows that integrate endpoint telemetry and security platforms * Automate detection, triage, containment (e.g., host quarantine), and remediation actions across endpoint fleets * Work in a DevOps-oriented delivery model using modern containerization, infrastructure-as-code, and CI/CD practices