DNS & Endpoint Security Advisor

About
The DNS & Endpoint Security Advisor is responsible for providing expert technical guidance and implementing robust security controls to protect the organization’s DNS infrastructure and all endpoint devices. This role requires hands-on expertise in DNS protocols, endpoint protection technologies, and security tooling from the company and/or the company. The advisor will work closely with IT and cybersecurity teams to ensure resilience against DNS-based threats and endpoint-level attacks, while continuously enhancing the organization’s overall security posture.

Key Responsibilities

• Serve as the primary subject matter expert for DNS security and endpoint protection across the organization.
• Design, implement, and maintain security controls to defend against DNS-based threats including hijacking, cache poisoning, tunneling, and DDoS attacks.
• Develop and manage a comprehensive endpoint security framework covering antivirus, anti-malware, host-based intrusion prevention, and EDR capabilities.
• Configure, optimize, and maintain the company and the company security solutions to ensure effective threat prevention and operational stability.
• Conduct routine assessments of DNS infrastructure and endpoint environments to identify vulnerabilities and recommend corrective actions.
• Provide technical guidance, best practices, and advisory support to IT and security teams on DNS and endpoint security architecture.
• Monitor emerging threats, zero-day vulnerabilities, and industry developments related to DNS and endpoint protection.
• Maintain documentation, processes, and reporting aligned with internal governance and compliance requirements.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related technical field, or equivalent hands-on experience.
• Minimum of 5 years of experience in a technical cybersecurity role with a focus on DNS and endpoint security.
• Certifications from the company and/or the company (highly desirable).
• Strong understanding of DNS protocols, DNS security architecture, and endpoint protection technologies.
• Experience with complementary security technologies such as firewalls, IDS/IPS, and SIEM platforms.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation and system hardening.
• Strong analytical and problem-solving skills with the ability to respond to complex threats.
• Excellent communication and advisory skills with the ability to guide both technical and non-technical teams.