End Point Protection Engineer

• Deploy, configure, and administer Microsoft Intune (Endpoint Manager) for Windows/macOS/iOS/Android: enrollment, compliance, configuration profiles, app packaging, and patching.

• Manage and tune endpoint security: Microsoft Defender for Endpoint and/or SentinelOne policies, EDR/XDR detections, exclusions, and containment workflows.

• Monitor, triage, and investigate alerts in Microsoft Defender XDR and Microsoft Sentinel; run KQL queries, escalate incidents, and drive end-to-end remediation.

• Maintain security baselines (CIS/Zero Trust), Conditional Access, BitLocker/FileVault, and vulnerability/patch remediation with clear runbooks and documentation.

• Build automation and response playbooks (Logic Apps/Power Automate) to improve signal quality and reduce MTTR; partner with IT to harden endpoints.

• Qualifications: 3-5 years in endpoint/security ops; hands-on with Intune, Defender for Endpoint or SentinelOne, Microsoft Sentinel/XDR, incident response, and KQL.

Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individuals skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the companys 401(k) retirement plan.

Information :

• Company : VACO
• Position : End Point Protection Engineer
• Location : Tampa, FL
• Country : US