Endpoint Security Service Owner Engineer

We are looking for a hands-on Endpoint Security Service Owner (Engineer) to join our Security Operations this role you will be responsible for operating maintaining and continuously improving endpoint security services across cloud and hybrid-cloud environments supporting a global financial services organization. 

You will work with technologies such as Wazuh ClamAV Microsoft Defender and related security monitoring solutions to ensure strong endpoint protection visibility and threat detection capabilities. This role combines engineering operational ownership automation troubleshooting and close collaboration with Security Operations Incident Management Infrastructure and Cloud teams. 

This is not a governance or policy role. We are looking for an engineer who enjoys building operating and improving security platforms takes ownership of services and can work independently in a global environment. Strong hands-on experience with Wazuh is a mandatory requirement and will be a primary selection criterion. 

Your key tasks 

• Own and operate the Endpoint Security service
• Deploy configure and maintain Wazuh across Linux and Windows environments
• Manage and optimize ClamAV deployments and endpoint security agents
• Support and improve EDR/XDR capabilities including Microsoft Defender
• Monitor platform health agent coverage and security telemetry
• Support threat investigations incident response activities and remediation efforts
• Automate operational tasks and continuously improve service efficiency
• Work closely with Security Operations Infrastructure Cloud and Incident Management teams

Qualifications :

• Proven hands-on experience deploying configuring and administering Wazuh in enterprise environments
• Experience managing and troubleshooting ClamAV
• Good understanding of endpoint security threat detection incident response and security monitoring
• Experience with Linux administration and security tooling
• Experience with scripting or automation (Bash Python PowerShell or similar)
• Familiarity with Microsoft Defender or other EDR/XDR platforms
• Strong troubleshooting analytical and problem-solving skills
• Ability to work independently take ownership and collaborate with global teams
• Good written and spoken English

It would be a real bonus if you have 

• Experience with Oracle Cloud Infrastructure (OCI)
• Experience with Splunk SOAR or other security orchestration and automation platforms
• Experience integrating Wazuh with SIEM or SOAR solutions
• Experience with vulnerability management solutions such as Tenable
• Experience in banking financial services or other regulated environments
• Relevant security Splunk Microsoft or OCI certifications

Additional Information :

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. 

In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. 

We hire compensate and promote regardless of origin age gender identity sexual orientation or any other fantastic traits that make us all unique we have done our best to write this advert in an inclusive and neutral way. 

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies and any unsolicited candidate submissions will be exempt from any payment expectations.  

#LI-Hybrid

Remote Work :

No

Employment Type :

Full-time