Responsibilities

At Workato, security is foundational to our mission. We are seeking a proactive and detail-oriented Security Engineer – Endpoint Security to join our expanding Security team in India. In this role, you will be responsible for managing and optimising endpoint security capabilities across our global environment.

Your primary responsibility will be to own the lifecycle of Endpoint Detection and Response (EDR) platforms—with SentinelOne preferred—including configuration, policy management, and continuous tuning to enhance our protection and detection posture. You will ensure endpoints remain hardened, compliant, and resilient against evolving threats by integrating security controls, closing vulnerabilities, and maintaining consistent security baselines across Windows, macOS, and Linux systems.

As a key member of the security operations ecosystem, you will collaborate closely with IT, Cloud Security, Threat Detection, and Incident Response team members to enrich detection capabilities, support audits, and strengthen endpoint visibility across the organisation.

If you are passionate about building robust endpoint defences, modernising detection strategies, and driving scalable security automation, this role is an excellent opportunity for you!

 You will also be responsible to:

• Configure, maintain, and optimise the organisation’s Endpoint Detection and Response (EDR) platform, with SentinelOne preferred.

• Create, refine, and tune EDR detection rules, behavioural analytics, and threat-hunting logic aligned with the MITRE ATT&CK framework.

• Ensure endpoints across Windows, macOS, and Linux remain up to date with the latest security patches, agent versions, and configuration baselines.

• Develop and enforce endpoint security policies, OS-hardening standards, and configuration baselines.

• Create and maintain Agent Installation SOPs for multiple operating systems to support consistent deployment by IT teams.

• Monitor endpoint posture, identify vulnerabilities, and ensure timely remediation within defined SLAs.

• Manage and troubleshoot CASB solutions (Zscaler preferred), including policy configuration, performance tuning, and access control.

• Implement and optimise Data Loss Prevention (DLP) controls on endpoints and within CASB platforms.

• Apply strong knowledge of data classification, sensitivity labels, and adaptive protection controls to safeguard sensitive data across devices.

• Manage and maintain email security solutions, anti-phishing controls, and authentication mechanisms such as DMARC, DKIM, and SPF.

• Define and support email security workflows, triage methodologies, and automated mitigation steps to address email-based threats.

• Automate operational tasks and workflows using scripting languages (Python, PowerShell, Bash) or Workato automation recipes.

• Maintain detailed documentation for endpoint security policies, baselines, detections, and troubleshooting procedures.

• Support internal and external audits (SOC 2, ISO 27001, customer audits) by providing required logs, configurations, and evidence.

• Stay current with emerging threats, vulnerabilities, and advancements in endpoint, CASB, and EDR security technologies.

Requirements

Qualifications / Experience / Technical Skills

• 3 to 6 years of hands-on experience in endpoint security, EDR management, device hardening, or security engineering in cloud-based or SaaS environments.

• Proven expertise with EDR platforms, especially SentinelOne, including rule tuning, policy configuration, and threat detection optimisation.

• Strong experience with endpoint hardening across Windows, macOS, and Linux.

• Solid understanding of DLP implementation, data protection techniques, sensitivity labels, and data classification frameworks.

• Strong hands-on experience with CASB solutions, preferably Zscaler, including policy configuration, troubleshooting, performance tuning, and DLP integration.

• Working knowledge of cybersecurity frameworks, including MITRE ATT&CK, CIS Benchmarks, and NIST guidelines.

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR.

• Hands-on experience with scripting/automation using Python, PowerShell, Bash, or Workato automation.

• Experience with email security technologies and phishing defence mechanisms.

• Relevant certifications such as SentinelOne, CompTIA Security+, CySA+, GIAC, CCSP, or other endpoint/cloud security certifications.

Soft Skills / Personal Characteristics

• Strong problem-solving and analytical skills with an automation-first mindset.

• Excellent communication and collaboration skills to work across teams.

• Ability to work independently and manage multiple tasks effectively in a fast-paced environment

(REQ ID: 2462)