Lead Endpoint Security Engineer

Lead Engineer / Endpoint Security Engineering, VP

Job Description:

Job Title: Lead Engineer / Endpoint Security Engineering, VP

Location: Pune, India

Role Description

As a Lead Engineer, you will be responsible for driving endpoint security engineering initiatives across the bank. You will design, implement, and maintain advanced endpoint security solutions leveraging Microsoft, Tanium, Prisma, and other enterprise grade security platforms. You will provide strong technical leadership, collaborate closely with global teams, and ensure high standards of delivery excellence while aligning all initiatives with CSO strategy, regulatory requirements, and compliance objectives.

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

• Lead the design, deployment, and management of endpoint security solutions using Microsoft Defender for Endpoint, Tanium, Broadcom, Palo-Alto Prisma, and other enterprise tools.
• Provide technical leadership and direction to a team of engineers, ensuring quality delivery, knowledge sharing, and adherence to security practices.
• Configure and optimize Tanium Modules (Enforce, Comply, Integrity Monitor, Threat Response, Performance, Patch etc) to enhance endpoint protection, visibility, and compliance.
• Oversee integration of endpoint security with Intune, Azure AD, and Defender for cloud apps for unified device management and policy enforcement.
• Manage EDR/XDR platforms such as Microsoft Defender, CrowdStrike etc. ensuring consistent policy application and efficient operations.
• Develop and maintain endpoint hardening standards, ensuring alignment with frameworks such as CIS, NIST, and ISO27001.
• Collaborate with Cyber Defence, Infrastructure, and Cloud teams to address security risks remediate vulnerabilities, and support audit closure.
• Drive process improvement, automation, and operational efficiency within endpoint security.
• Represent Endpoint Security in cross-functional governance and strategy discussions, contributing to architectural and policy decisions.
• Prepare and maintain technical documentation, architectural diagrams, and operational guides.

Your skills and experience

• 12+ years of experience in endpoint security engineering, architecture, and operations within large enterprise environments.
• Proven experience leading or mentoring teams in endpoint security engineering or operations.
• Strong technical expertise in the Microsoft Security ecosystem, including:
• Defender for Endpoint, Defender for Server, Defender for Cloud Apps, Intune, Device Control, Cloud Identity, M365 SIEM Integration, and Microsoft Security Copilot.
• Hands on experience managing Tanium platform and integrating it within enterprise environments.
• Strong understanding of endpoint hardening, vulnerability management, and security compliance processes.
• Ability to translate business and risk requirements into practical security solutions.
• Excellent leadership, communication, and stakeholder management skills, with experience working across global teams.
• Proven delivery of large-scale, complex security projects in regulated, fast-paced environments.
• Demonstrated ability to manage end-to-end project lifecycles, including planning, budgeting, resource allocation, and delivery within scope and timelines.
• Demonstrated commitment to staying current with emerging threats, technologies, and industry trends through ongoing education and professional development.

Certifications (Preferred):

• Microsoft Certified: AZ-500, SC-900, SC-200, MS-900
• Tanium Certified Operator or Tanium Certified Administrator
• Always a plus: CISSP, CISM, CompTIA Security+ or other relevant certifications in the field

Education:

• Bachelor’s or master’s degree in computer science, Information Security, or a related field.

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information:

https://www.db.com/company/company.html

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Experience Level

Senior Level