Join EY's Cybersecurity practice as a Manager, playing a pivotal role in delivering advanced Endpoint Security and Management services. This position involves a broad scope of responsibilities, including Endpoint Protection Platforms (EPP), Endpoint Detection & Response (EDR/XDR), Mobile Device Management (MDM), and Email Security. You'll be instrumental in safeguarding enterprise devices and communication channels across diverse client environments, working collaboratively with various IT and security teams to enhance cyber resilience.

This is an exciting opportunity for experienced cybersecurity professionals to leverage their expertise in a dynamic, global organization. We are looking for individuals with a strong technical background and a passion for protecting digital assets against evolving threats.

Key responsibilities include deploying and managing endpoint security solutions like Microsoft Defender and CrowdStrike, configuring protections against malware and ransomware, and monitoring security alerts. You will also investigate suspicious activities, conduct threat analysis, and support incident response efforts. Additionally, administer and tune EDR solutions for threat hunting and forensic analysis, manage Microsoft Intune for enterprise device management including MAM policies, and configure email security controls for threat prevention.

Further duties involve integrating endpoint and email security telemetry with SIEM platforms such as Microsoft Sentinel, developing automated response workflows, and utilizing scripting languages for investigation and automation. You will also contribute to developing endpoint security standards, operational runbooks, and support vulnerability remediation initiatives. Collaboration with SOC, infrastructure, and cloud teams is essential for improving overall security posture.

To excel in this role, you must have a B.Tech or equivalent degree in Cybersecurity, Computer Science, or a related field, coupled with over 12 years of relevant cybersecurity experience. Essential hands-on experience includes EPP/EDR/XDR tools (e.g., Microsoft Defender, CrowdStrike, SentinelOne), UEM/MDM (e.g., Microsoft Intune), and Email Security solutions (e.g., Microsoft Defender for Office 365).

Demonstrated experience in supporting endpoint security operations and incident response is crucial. A solid understanding of endpoint hardening, threat detection, malware analysis, and device compliance management is required. Familiarity with MITRE ATT&CK framework, endpoint attack techniques, and security monitoring concepts is also necessary. Strong verbal and written communication skills are vital for effective collaboration and reporting. Experience with PowerShell, Python, KQL, automation, or scripting is considered advantageous.