System Security Engineer

The company is seeking a System Security Engineer to administer and manage endpoint detection and response solutions including Microsoft Defender for Endpoint, CrowdStrike Falcon, and SentinelOne. The role includes responsibilities across various security domains such as policy configuration, alert triage, threat hunting, antivirus management, and firewall configuration.

Location: Dubai, United Arab Emirates (On-site)
Work Conditions: Full-time

Responsibilities:

• Administer endpoint detection and response solutions.
• Perform policy configuration, exclusions management, alert triage, and proactive threat hunting.
• Manage next-generation antivirus and exploit protection features including Attack Surface Reduction (ASR) and Controlled Folder Access.
• Configure Windows Defender Firewall and endpoint device control policies.
• Implement application control using tools such as AppLocker and Windows Defender Application Control (WDAC).
• Apply Windows security hardening based on CIS Benchmarks and Microsoft Security Baselines.
• Manage Active Directory policies and device lifecycle using platforms like Microsoft Intune and SCCM.
• Support device provisioning and Windows Autopilot deployments.
• Manage patching and third-party application updates.
• Work with identity services including Active Directory and Microsoft Entra ID.
• Analyze endpoint telemetry and support incident response activities.
• Perform threat hunting and develop automation scripts using PowerShell and potentially Python.

Qualifications & Skills:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 3–6+ years of experience in endpoint security, system security engineering, or cybersecurity operations.
• Hands-on experience with Microsoft security ecosystem including Defender, Intune, and Entra ID.
• Strong knowledge of endpoint protection technologies and security hardening practices.
• Scripting experience (PowerShell required; Python is a plus).
• Familiarity with threat hunting and endpoint forensic analysis.

Preferred Certifications:

• CompTIA Security+
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)
• Microsoft Security or Endpoint Management certifications

Language Requirements: (Not specified; please verify if necessary)