Information Security Engineer EDR,EPP

Since 2004, 2P – Perfect Presentation has been a leader in Saudi Arabia’s ICT landscape, delivering integrated technology solutions that help organizations accelerate digital transformation and improve operational efficiency. With a strong foundation in innovation and service excellence, 2P continues to provide end-to-end solutions through its specialized business units and trusted market expertise. We are looking for a hands-on Cybersecurity Engineer to join our Cybersecurity Department, with a primary focus on the deployment, administration, and optimization of Endpoint Detection & Response (EDR) and Endpoint Protection Platform (EPP) technologies. This is a platform ownership role, responsible for maintaining endpoint security tool health, policy compliance, platform currency, and complete asset coverage rather than a purely monitoring-focused position. Key Responsibilities Endpoint Security – EDR / EPP • Deploy, configure, and maintain EDR/EPP agents across servers and workstations. • Administer endpoint security platforms such as Kaspersky Endpoint Security, Kaspersky EDR, CrowdStrike, and Microsoft Endpoint Protection. • Manage Kaspersky Security Center (KSC/KSCA), including policy deployment, agent management, task scheduling, and reporting. • Configure and tune endpoint security policies, including: • Detection and prevention policies • Application control • Device control • Web and mail filtering • Monitor endpoint coverage and agent health, identifying unmanaged, inactive, or offline endpoints. • Ensure endpoint security policies remain current and consistently applied across the environment. • Coordinate with the SOC team on detection-rule tuning and false-positive reduction. • Manage platform upgrades, patch cycles, version updates, and vendor escalations. • Produce regular reports covering endpoint coverage, platform health, policy compliance, and security posture. Platform Ownership & Operations • Maintain SOPs, operational procedures, and runbooks for assigned cybersecurity platforms. • Participate in formal change management processes, including submission, review, testing, and implementation of change requests. • Coordinate with cybersecurity vendors for technical support, escalations, renewals, and product roadmap updates. • Support incident response activities related to endpoint security platforms. • Troubleshoot platform, agent, connectivity, and policy-related issues. • Work with infrastructure, server, network, and SOC teams to maintain reliable endpoint security coverage. Required Qualifications • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field. • 3–5 years of experience in Cybersecurity Infrastructure, Endpoint Security, or a related technical security role. • Strong hands-on experience with EDR and EPP technologies. • Practical experience with Kaspersky Endpoint Security and Kaspersky EDR, preferably Expert or Optimum tiers. • Hands-on experience managing Kaspersky Security Center (KSC/KSCA). • Experience with policy deployment, endpoint agent management, health monitoring, and security reporting. • Good administration knowledge of Windows Server and Linux environments. • Good understanding of firewalls, proxies, network segmentation, and endpoint-security connectivity requirements. • Strong troubleshooting, documentation, and technical problem-solving skills. • Ability to work effectively with SOC, infrastructure, networking, and vendor teams. Preferred Technical Experience • Kaspersky Endpoint Security / Kaspersky EDR • Kaspersky Security Center (KSC/KSCA) • CrowdStrike • Microsoft Endpoint Protection • EDR/EPP Policy Management • Windows & Linux Administration • Endpoint Agent Deployment • Security Policy Compliance • Change Management • Incident Response Support Show more Show less

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field. 3–5 years of experience in Cybersecurity Infrastructure, Endpoint Security, or a related technical security role. Strong hands-on experience with EDR and EPP technologies. Practical experience with Kaspersky Endpoint Security and Kaspersky EDR, preferably Expert or Optimum tiers. Hands-on experience managing Kaspersky Security Center (KSC/KSCA). Experience with policy deployment, endpoint agent management, health monitoring, and security reporting. Good administration knowledge of Windows Server and Linux environments. Good understanding of firewalls, proxies, network segmentation, and endpoint-security connectivity requirements. Strong troubleshooting, documentation, and technical problem-solving skills. Ability to work effectively with SOC, infrastructure, networking, and vendor teams.

Deploy, configure, and maintain EDR/EPP agents across servers and workstations. Administer endpoint security platforms such as Kaspersky Endpoint Security, Kaspersky EDR, CrowdStrike, and Microsoft Endpoint Protection. Manage Kaspersky Security Center (KSC/KSCA), including policy deployment, agent management, task scheduling, and reporting. Configure and tune endpoint security policies (detection and prevention, application control, device control, web and mail filtering). Monitor endpoint coverage and agent health, identifying unmanaged, inactive, or offline endpoints. Ensure endpoint security policies remain current and consistently applied. Coordinate with the SOC team on detection-rule tuning and false-positive reduction. Manage platform upgrades, patch cycles, version updates, and vendor escalations. Produce regular reports covering endpoint coverage, platform health, policy compliance, and security posture. Maintain SOPs, operational procedures, and runbooks for assigned cybersecurity platforms. Participate in change management processes, including submission, review, testing, and implementation of change requests. Coordinate with cybersecurity vendors for technical support, escalations, renewals, and product roadmap updates. Support incident response activities related to endpoint security platforms. Troubleshoot platform, agent, connectivity, and policy-related issues. Work with infrastructure, server, network, and SOC teams to maintain reliable endpoint security coverage.