The Endpoint and Automation Security Engineer at GEICO is responsible for designing, implementing, and maintaining endpoint security technologies and automation solutions. This role focuses on protecting organizational assets through endpoint detection and response, scripting, and operational security automation. The engineer will collaborate with various teams to enhance security posture and streamline workflows. The position requires strong technical expertise in endpoint security platforms and automation frameworks.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent work experience.
• 3–5 years of experience in cybersecurity, endpoint engineering, systems administration, or security automation.
• Experience administering endpoint security platforms.
• Experience with scripting or automation using PowerShell, Python, Bash, or similar languages.
• Understanding of endpoint security principles, threat detection, malware defense, and incident response processes.
• Familiarity with Windows and Linux operating systems and enterprise endpoint management.
• Experience working with SIEM or security monitoring platforms.
• Knowledge of vulnerability management tools and remediation processes.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to communicate technical concepts effectively to technical and non-technical audiences.

• Administer, maintain, and optimize endpoint security platforms including EDR/XDR, device control, and endpoint management solutions.
• Develop and maintain security automation workflows to improve detection, response, remediation, and operational efficiency.
• Create and support scripts and automation tools using PowerShell, Python, Bash, or similar languages.
• Monitor endpoint security alerts and collaborate with Security Operations teams during investigations and incident response activities.
• Implement endpoint hardening standards and security baselines for Windows, macOS, Linux, and mobile platforms.
• Support identity and access management initiatives related to endpoint security controls.
• Integrate endpoint security tooling with SIEM, ticketing, orchestration, and monitoring platforms.
• Participate in security assessments, audits, compliance initiatives, and remediation efforts.
• Troubleshoot and resolve complex endpoint security and automation issues.
• Create and maintain technical documentation, operational procedures, and knowledge base articles.
• Collaborate with cross-functional teams to support secure infrastructure and cloud initiatives.