The posting
Senior Specialist - Information Security - IN
Lead Endpoint Security Engineer
Position Summary
The Lead Endpoint Security Engineer provides technical leadership for the engineering, maintenance, testing, troubleshooting, and continuous improvement of cybersecurity technologies deployed across the enterprise endpoint environment. The role provides lead-level technical ownership and direction for endpoint security applications, agents, integrations, and supporting services, ensuring security controls remain operationally healthy, resilient, effectively configured, supportable, scalable, and performant. This engineer serves as a technical authority and escalation point for complex endpoint cybersecurity issues and provides engineering direction across the lifecycle of endpoint security technologies, from evaluation and architecture through testing, deployment, production support, optimization, and eventual retirement. The Lead Endpoint Security Engineer works closely with Cybersecurity, Endpoint Engineering, infrastructure, application, architecture, security operations, and technology partners to deliver secure and reliable endpoint protections. The role leads complex technical initiatives, establishes engineering practices and standards, provides technical guidance to other engineers, and influences decisions affecting the enterprise endpoint security architecture.
Key Responsibilities
Endpoint Security Engineering
- Lead the engineering, configuration, deployment, maintenance, and support of enterprise endpoint cybersecurity technologies.
- Provide lead technical ownership for security agents and controls deployed across workstation, server, virtual desktop, cloud-hosted, and other supported endpoint environments.
- Provide technical direction for endpoint security architecture, technology integrations, platform upgrades, migrations, and control enhancements.
- Lead evaluation of endpoint security configurations to ensure controls operate reliably, securely, and without unacceptable impact to endpoint functionality or user experience.
- Establish engineering standards and technical requirements for the implementation, configuration, testing, and operation of endpoint cybersecurity technologies.
- Lead technical design reviews and evaluate proposed changes for security effectiveness, architectural alignment, integration dependencies, operational supportability, performance, and implementation risk.
- Partner with Endpoint Engineering, infrastructure, architecture, and device-management teams to define engineering approaches for endpoint agent and management-platform integrations.
- Evaluate current and emerging endpoint security technologies and provide technical recommendations regarding adoption, integration, enhancement, consolidation, or retirement.
- Define and monitor operational health measurements for endpoint security platforms, including agent coverage, connectivity, application health, policy compliance, version currency, telemetry availability, and remediation status.
- Identify technical debt, recurring operational issues, and architectural limitations and develop engineering solutions to increase service reliability.
- Lead planning and execution of complex application upgrades, patches, hotfixes, version updates, migrations, and major configuration changes.
- Lead root-cause analysis for significant or recurring technical issues and ensure appropriate corrective and preventative actions are implemented.
- Coordinate multi-team troubleshooting involving infrastructure, desktop engineering, application,
- Ensure appropriate regression, rollback, recovery, and failure-mode testing is performed prior to significant production deployments
- Lead interoperability and coexistence testing between endpoint cybersecurity controls such as EDR/XDR, endpoint protection, host firewall, DLP, application control, vulnerability management, privilege management, browser security, and other endpoint agents.
- Define technical go/no-go criteria for endpoint cybersecurity deployments based on security effectiveness, stability, compatibility, operational readiness, and performance.
- Partner with cybersecurity architecture and adjacent engineering teams to ensure endpoint controls integrate appropriately with broader enterprise security capabilities such as SIEM, SOAR, IAM/PAM, vulnerability management, network security, and incident response.
- Maintain awareness of changes in endpoint attack techniques, operating-system capabilities, security technologies, and industry practices and translate relevant developments into engineering recommendations.
- Lead development of automation for endpoint security administration, platform-health monitoring, remediation, testing, reporting, and lifecycle-management activities.
- Provide technical input into project planning, technology roadmaps, vendor evaluations, and endpoint cybersecurity strategy.
- Provide technical guidance and mentorship to endpoint cybersecurity engineers and other technology professionals.
Required Qualifications
- Extensive experience in endpoint security engineering, endpoint management, cybersecurity engineering, or endpoint infrastructure engineering.
- Advanced expertise troubleshooting complex enterprise endpoint security applications, agents, integrations, and supporting services.
- Advanced knowledge of Windows endpoint architecture, services, processes, networking, system performance, and operating-system security.
- Strong working knowledge of additional enterprise endpoint environments such as Windows Server, macOS, Linux, VDI, and cloud-hosted endpoints.
- Extensive experience with endpoint security technologies such as EDR/XDR, endpoint protection, vulnerability management, host firewall, device control, DLP, application control, privilege management, browser security, or comparable endpoint controls.
- Experience operating cybersecurity technologies at scale within a large enterprise environment.
Preferred Qualifications
- Extensive experience with enterprise-scale EDR/XDR platforms and Microsoft endpoint-management and security technologies.
- Experience supporting and engineering security solutions across physical endpoints, Windows Server, virtual desktop/VDI, cloud-hosted, macOS, and Linux environments.
- Advanced experience with endpoint telemetry, observability, platform-health monitoring, performance benchmarking, and performance troubleshooting.
- Experience developing automation for platform health checks, testing, engineering workflows, application maintenance, or operational remediation using technologies such as PowerShell, Python, APIs, or equivalent automation frameworks.
- Experience integrating endpoint controls with SIEM, SOAR, vulnerability management, IAM/PAM, network security, incident response, and other enterprise security platforms.
- Experience leading security technology POCs, product evaluations, architecture reviews, and production-readiness assessments.
- Strong understanding of security frameworks and control models such as NIST CSF and Zero Trust principles.
- Relevant cybersecurity, Microsoft, cloud, endpoint-management, or security-product certifications.
Educational Requirements
- University (Degree) Preferred
Work Experience
- 5+ Years Required; 7+ Years Preferred
Physical Requirements
- Physical Requirements: Sedentary Work
Career Level 8IC
Related Skills
Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively
_____________________________________________________________________________________________________
Company Overview
TIAA Global Capabilities was established in 2016 with a mission to tap into a vast pool of talent, reduce risk by insourcing key platforms and processes, as well as contribute to innovation with a focus on enhancing our technology stack. TIAA Global Capabilities is focused on building a scalable and sustainable organization , with a focus on technology , operations and expanding into the shared services business space.
Working closely with our U.S. colleagues and other partners, our goal is to reduce risk, improve the efficiency of our technology and processes and develop innovative ideas to increase throughput and productivity.
We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.
Our Culture of Impact
At TIAA, we're on a mission to build on our 100+ year legacy of delivering for our clients while evolving to meet tomorrow's challenges. We equip our associates with future-focused skills and AI tools that enable us to advance our mission. Together, we are fighting to ensure a more secure financial future for all and for generations to come. We are guided by our values: Champion Our People, Be Client Obsessed, Lead with Integrity, Own It, and Win As One. They influence every decision we make and how we work together to serve our clients every day. We thrive in a collaborative in-office environment where teams work across organizational boundaries with shared purpose, accelerating innovation and delivering meaningful results. Our workplace brings together TIAA and Nuveen's entrepreneurial spirit, where we work hard and work together to create lasting impact. Here, every associate can grow through meaningful learning experiences and development pathways—because when our people succeed, our impact on clients' lives grows stronger.
Accessibility Support
TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.
If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team:
Phone: (800) 842-2755
Email: [email protected]
Privacy Notices
For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here.
For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here.
For Applicants of TIAA Global Capabilities, click here.
For Applicants of Nuveen residing in Europe and APAC, please click here.
