Endpoint Engineer

Job Description:

Role Description

This role combines engineering expertise with operational excellence to enhance the security posture of DB’s devices, servers, and cloud workloads. You will collaborate with cross functional teams to design strategies, deploy solutions, and address security challenges.

Responsibilities

• Manage and optimize tools EDR (e.g., Microsoft Defender for Endpoint, CrowdStrike etc.), Antimalware solutions, and Tanium Endpoint Platform.
• Lead POCs for new security tools and features, evaluating their effectiveness, compatibility, and scalability. Document finding and provide detailed recommendation for production deployment.
• Develop and enforce endpoint policies, ensuring alignment with DB’s security standards.
• Maintain security for cloud workloads using platforms such as Prisma cloud or equivalent solutions. Ensure container image scanning, vulnerability management, and security configurations are in place for cloud workloads. 
• Lead efforts in endpoint attack surface reduction and hardening initiatives.
• Monitor and respond to endpoint and cloud workload security alerts and incidents, collaborating with the threat operations and other teams for resolution. Perform root cause analysis and remediation for security related issues.
• Drive the resolution of audit findings by working with cross functional teams to implement required controls on endpoints. Provide updates, maintain documentation, and ensure alignment with regulatory standards.
• Create scripts(PowerShell, Python etc.) for testing, monitoring, and compliance-related tasks.

Skills

Required:

• 5+ years of experience in endpoint security engineering or operations roles
• Expertise in EDR, Tanium, Antimalware, Device Control and Attack Surface Reduction strategies.
• Strong scripting skills in PowerShell or Python for automation and compliance checks.
• Relevant certifications in cybersecurity or related fields.
• Excellent communication skills.
• Experience in a banking or financial services environment.

Preferred:

• Familiarity with SIEM tools and other security technologies.
• Expertise in vulnerability management and risk remediation.
• Familiarity with cloud platforms (preferably GCP)

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression

What we offer 

• A rewarding work: we offer a purpose, a competitive income and promotions based on performance 

• Managers that empower your ideas and your decision-making abilities. You’re encouraged to show your good vibe, determination, and open mindedness 

• A professional, passionate, driven, but at the same time fun workplace. It is also flexible, including Work from Home opportunities 

• Medical insurance with premium benefits for you and discounted for your loved ones  

• The better you feel, the better you work. We nurture you with highly modern office that includes plenty of fun and relaxing areas to boost your creativity. We also facilitate copiously retailer discounts, cultural and CSR activities, employee sport clubs, workshops & more.  

• A range of flexible benefits that you can tailor to suit your needs

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.