Information Security Architect – Endpoint Security / EDR-XDR (Cybersecurity)

Location: San Jose, United States of America; onsite

Annual salary: $168,000–$312,000 in California; incentive compensation, bonus, equity, and benefits may also apply.

Company

hirify.global is hiring for an enterprise information security architecture role focused on endpoint security.

What you will do

• Define and own endpoint security architecture, standards, reference architectures, technical roadmaps, and governance across Windows, Linux, and macOS.
• Architect and govern EDR/XDR capabilities across thousands of endpoints, including deployment models, policies, telemetry, detection, response, remediation, isolation, and agent lifecycle management.
• Design integrations with SIEM, SOAR, SOC, ITSM, vulnerability management, identity, cloud security, network security, and other enterprise platforms.
• Develop endpoint detection and response strategies, threat-hunting capabilities, security controls, and incident-response guidance aligned with threat intelligence and adversary behavior.
• Define endpoint security baselines, hardening requirements, exception processes, compliance controls, and lifecycle requirements.
• Lead architecture reviews, technology evaluations, major incidents, mergers and acquisitions, enterprise transformations, and technical collaboration with security and infrastructure teams.

Requirements

• 8+ years of experience in information security, cybersecurity engineering, security architecture, endpoint security, security operations, or a related field.
• Demonstrated experience designing and architecting enterprise endpoint security solutions at scale, including EDR/XDR environments across thousands of endpoints.
• Deep hands-on and architectural experience with EDR and/or XDR technologies, including detection, threat hunting, incident response, remediation, and endpoint isolation.
• Strong understanding of endpoint security architecture across Windows, Linux, and macOS, as well as endpoint attacks, malware behavior, persistence, privilege escalation, lateral movement, and command execution.
• Experience developing enterprise security standards, architecture patterns, technical baselines, security controls, and risk-based designs using defense-in-depth, Zero Trust, and least privilege principles.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, proxies, firewalls, and common security protocols.
• Experience integrating EDR/XDR platforms with SIEM, SOAR, ITSM, vulnerability management, identity, and other security technologies.
• Experience with scripting and automation using PowerShell, Python, Bash, or similar technologies.
• Strong analytical, architecture, documentation, problem-solving, communication, and stakeholder-influence skills, with the ability to operate in a large, complex enterprise.

Nice to have

• Experience with multiple leading EDR/XDR platforms and evaluating or migrating between them.
• Experience with Microsoft Defender, Entra ID, Intune, Microsoft 365 Defender, SentinelOne, CrowdStrike, Palo Alto Cortex XDR, or similar technologies.
• Experience architecting security solutions in Azure or AWS and integrating EDR/XDR with MDR, cloud security, identity, vulnerability management, and ITSM platforms.
• Knowledge of MITRE ATT&CK, Tenable, CIS benchmarks, endpoint hardening, security baselines, compliance frameworks, SCCM/MECM, Jamf, or Ansible.
• Experience with Zero Trust architecture, endpoint security modernization, architecture assessments, technology evaluations, mergers, acquisitions, divestitures, and enterprise integrations.
• Security architecture certifications such as CISSP, SABSA, CCSP, or GIAC.

Culture & Benefits

• Paid vacation and paid holidays.
• 401(k) plan with employer match.
• Employee stock purchase plan.
• Medical, dental, and vision plan options.
• Potential eligibility for incentive compensation, bonus, and equity.