About Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
About The Role
We are in search of a skilled and experienced Endpoint and Email Security Engineer. This role will focus exclusively on the management of the endpoint and email security product in daily operations. Candidate will ensure the security and functionality of EDR and email services, assisting in the resolution of issues and the implementation of best practices. The candidate will handle the daily issue with EDR, AV and Email security with end users and take necessary actions based on the ITIL process. You will work closely with Level 2 engineer and other cybersecurity professionals to resolve complex issues and ensure that EDR tools are functioning optimally.
Key Responsibilities
Administration and BAU Operations
- Monitor EDR dashboards and alerts to detect security threats and anomalies.
- Perform initial triage, investigation, and response to endpoint security incidents.
- Ensure EDR agent health, updates, and policy enforcement across all managed devices.
- Collaborate with L1 teams to escalate unresolved security threats and incidents to L3 teams
Device Management & Security Enforcement
- Deploy, configure, and maintain EDR agents on Windows, macOS, and Linux endpoints.
- Assist in managing endpoint policies, exclusions, and security configurations.
- Ensure endpoint compliance with security standards and industry best practices.
- Troubleshoot agent installation, connectivity, and performance issues.
Incident & Problem Management
- Investigate and resolve EDR-related issues, coordinating with IT and security teams.
- Assist in Root Cause Analysis (RCA) and remediation of endpoint security incidents.
- Document and escalate persistent issues to L3 engineers or vendor support.
Reporting & Compliance
- Generate reports on EDR agent status, threat detections, and remediation actions.
- Support compliance audits by providing endpoint security logs and configurations.
- Follow change management and ITIL processes for security updates and policy changes.
Basic Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, or related field.
- Security certifications such as CrowdStrike CCFA, Trellix Certified Specialist, CompTIA Security+, or Microsoft Security Certifications (preferred).
- Hands-on experience with either or Trellix, CrowdStrike Falcon, and Secure Cloud EDR solutions.
- Knowledge of malware detection, forensic analysis, and threat intelligence.
Preferred Qualifications
- ITIL Foundation
- Experience with working in shifts and handling multiple client deployments
- Basic scripting knowledge (PowerShell, Python, Bash) for automation (preferred).
Why Gruve
At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.
Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.