Information Security Engineer - EDR & EPP Specialist

About 2P – Perfect Presentation

Established in 2004, 2P is a prominent player in Saudi Arabia’s information and communications technology industry. The company excels in delivering comprehensive technology solutions that foster digital transformation and boost operational efficiencies. Backed by specialist business units and deep market knowledge, 2P remains committed to innovation and delivering superior service quality.

Role Overview

We are seeking a dedicated Cybersecurity Engineer to join our cybersecurity team, focusing primarily on managing, deploying, and optimizing Endpoint Detection & Response (EDR) and Endpoint Protection Platform (EPP) solutions. This role demands full ownership of endpoint security platforms with responsibilities spanning policy enforcement, system health monitoring, software upgrades, and cross-team collaboration.

Key Responsibilities

• Install, configure, and oversee EDR/EPP agents on servers and workstations to guarantee security.
• Manage endpoint security tools including Kaspersky Endpoint Security, Kaspersky EDR, CrowdStrike, and Microsoft Endpoint Protection solutions.
• Administer Kaspersky Security Center (KSC/KSCA): handle policy implementations, agent controls, schedule maintenance tasks, and generate activity reports.
• Develop and refine endpoint security policies such as detection/prevention, application and device controls, as well as web and email filtering.
• Vigilantly monitor endpoint coverage and agent operational status, proactively identifying unmanaged or inactive devices.
• Ensure consistency and currency of endpoint security policies across the enterprise environment.
• Partner with the Security Operations Center (SOC) to fine-tune detection rules and reduce false alarms.
• Coordinate platform updates, patch management, version upgrades, and manage vendor communications for escalations.
• Create routine reports on endpoint security metrics including coverage, compliance, and platform status.
• Maintain and update Standard Operating Procedures (SOPs), runbooks, and operational protocols concerning assigned cybersecurity platforms.
• Engage in formal change management workflows encompassing submission, evaluation, testing, and deployment of change requests.
• Interact with cybersecurity vendors for support resolution, contract renewals, and product roadmap insights.
• Support incident response initiatives related to endpoint security platforms.
• Resolve issues involving platform stability, agent connectivity, and policy application.
• Collaborate with infrastructure, server, network, and SOC teams to ensure consistent and reliable endpoint security coverage.

Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline.
• Between three to five years of professional experience in cybersecurity infrastructure, particularly in endpoint security roles.
• Demonstrable hands-on expertise with EDR and EPP technologies.
• Proven practical experience working with Kaspersky Endpoint Security and Kaspersky EDR platforms, ideally at Expert or Optimum proficiency levels.
• Familiarity managing Kaspersky Security Center (KSC/KSCA) for endpoint control activities.
• Competence in deploying policies, managing endpoint agents, monitoring health, and producing security reports.
• Knowledge of Windows Server and Linux environment administration.
• Understanding of network security fundamentals including firewalls, proxies, network segmentation, and requirements for endpoint-security communications.
• Strong problem-solving aptitude combined with thorough documentation and troubleshooting capabilities.
• Effective communication and collaboration skills to work with SOC, infrastructure, networking, and third-party vendor teams.

Preferred Technical Skills

• Kaspersky Endpoint Security and Kaspersky EDR expertise
• Kaspersky Security Center (KSC/KSCA) administration
• Experience with CrowdStrike platform
• Knowledge of Microsoft Endpoint Protection
• EDR/EPP policy deployment and management
• Windows and Linux system administration
• Endpoint agent deployment and management capabilities
• Ensuring security policy compliance
• Participation in change management procedures
• Support for cybersecurity incident response operations