Job Description
This role of Endpoint Security Master is a cloud-focused, customer-facing role responsible for deploying, operating, and maintaining CrowdStrike Falcon sensor coverage across enterprise cloud platforms. The primary focus is the secure, scalable deployment of CrowdStrike Falcon sensors to Kubernetes workloads across AWS, GCP, and Azure. Additionally, this role will lead and participate in endpoint security initiatives that strengthen the organization’s security posture, improve operational resilience, and advance endpoint protection capabilities.
The Endpoint Security Master is a customer-facing role that assists the Endpoint Security team in overseeing the deployment, availability, and optimization of endpoint security tools managed by other team members. At the Master level, this role is responsible for driving the overall security strategy for all organizational endpoints—including Windows, Linux, Mac, and Cloud environments—designing and implementing comprehensive solutions that secure every aspect of endpoint infrastructure.
The candidate will ensure that the organization has the appropriate capabilities, processes, and controls in place to protect endpoints against evolving threats, working closely with cross-functional teams to integrate best-in-class security practices. While expertise in Endpoint Detection and Response (EDR) remains vital, the role expands to encompass broader endpoint security architecture, policy design, and continuous improvement across device types and platforms.
CrowdStrike Administrator
CrowdStrike Platform Management: Manage and maintain the CrowdStrike Falcon platform, including platform configuration, integrations, access controls, licensing, sensor lifecycle, system health, upgrades, and ongoing operational performance.
Cloud Platform Management: Implement, maintain, and administer CrowdStrike Falcon capabilities for cloud workloads across public, private, hybrid, and multi-cloud environments, with emphasis on virtual machines, containers, and managed Kubernetes platforms.
Cloud Sensor Deployment: Design, automate, and manage deployment of CrowdStrike Falcon sensors across cloud-hosted virtual machines, Kubernetes nodes, and managed Kubernetes platforms in public, private, hybrid, and multi-cloud environments. Monitor sensor health, coverage, version compliance, and connectivity; troubleshoot installation, registration, and communication issues.
Configuration and Policies
Configure and manage deployment and prevention policy settings to align with the organization's security posture.
Incident Support: Work collaboratively with Security Analysts and Incident Responders to ensure the platform is functioning optimally for threat detection, investigation, and response.
Documentation: Create and maintain documentation for CrowdStrike configuration, processes, and best practices.
Collaboration
Partner with cloud engineering, cloud security and platform engineering, teams to integrate CrowdStrike sensor deployment into infrastructure provisioning, Kubernetes operations, and CI/CD workflows.
Work with and support other cybersecurity groups with investigations, projects, and day-to-day operational tasks.
Provide security recommendations for endpoint configuration.
Provide technical support and training to end-users on security best practices and effective use of endpoint security solutions. Endpoint Security Oversight
Knowledge and Skills
7 to 10+ years of experience in IT security, with a strong focus on endpoint protection and strategy.
Extensive Cyber and IT security knowledge.
Wiz EDR experience is a strong plus
Deep, hands-on expertise administering CrowdStrike Falcon solutions in enterprise cloud environments, including sensor deployment, policy management, health monitoring, and troubleshooting.
Expert-level knowledge of Linux operating systems and container hosts, with working knowledge of Windows and macOS endpoint security.
Advanced experience with cloud infrastructure across public, private, hybrid, and multi-cloud environments, including virtual machines, managed Kubernetes services, identity and access management, networking, workload lifecycle management, and scalable sensor deployment patterns.
Deep understanding of Kubernetes architecture and operations, including clusters, nodes, Pods, Namespaces, Deployments, DaemonSets, Helm-based deployments, and container security controls.
Proficiency with Python, PowerShell, or Bash and infrastructure-as-code or configuration automation used to deploy, validate, and maintain CrowdStrike coverage at scale.
Strong understanding of network protocols and host-based firewalls
Delivers critical contributions to the success of complex and/or impactful projects that lead to improved cybersecurity hygiene.
Additional Skills
Project Technical Leadership - Leads the technical planning, coordination, execution, and delivery of cross-functional endpoint security initiatives; establishes technical direction, manages dependencies and risks, and drives alignment among security, cloud, infrastructure, and business stakeholders.
Mentoring - Encourages personal growth of others by supporting them to take risks, be creative thinkers, and contribute and help lead toward an idea or solution
Influence - Expresses complex ideas confidently with appropriate level of details and adapts approach by tailoring a clear, concise, and compelling message based on audience.
Expertise -Creates and shares new knowledge in addition to setting best practices in the organization; is a known domain leader.
Coachability- Engages in opportunities for professional development and in turn contributes to training other technologists.
Accessibility
HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here.
Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability.
What We Can Offer You
Health & Wellbeing
We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.
Personal & Professional Development
We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.
Unconditional Inclusion
We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.
Let's Stay Connected
Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE.
Job
- Information Technology
- Job Level:
- TCP_05
- "The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level.
- United States of America: Annual Salary USD 126,500 - 290,500 in Illinois & Maryland & North Carolina & Texas & Virginia
- The listed salary range reflects base salary. Variable incentives may also be offered."
Information about employee benefits offered in the US can be found at https://myhperewards.com/main/new-hire-enrollment.html
HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together. Please click here: Equal Employment Opportunity.
Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities.
HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.
Recruitment Fraud Alert
We have become aware of an increase in fraudulent recruitment activities in which individuals impersonate our company or authorized recruitment agencies to offer fake employment opportunities. These scams may occur through false websites, emails, social media, or chat-based applications and often aim to obtain personal information or money. Please note that Hewlett Packard Enterprise (HPE), its direct and indirect subsidiaries and affiliated companies, and its authorized recruitment agencies/vendors will never charge a candidate a registration fee, hiring fee, or any other fee in connection with its recruitment and hiring process. We also never request personal information such as back account details, Social Security numbers, or national IDs via social media or chat applications.
All legitimate job opportunities will come through official company channels, and candidates are responsible for verifying the credentials of any third party claiming to represent the company. Any reliance on fraudulent communication is at the individual’s own risk, and HPE disclaims legal liability for any resulting damages. If you suspect recruitment fraud, do not share personal information or make any payments and report the incident to your local authorities immediately.
