Information Security Engineer EDR,EPP

Since 2004, 2P – Perfect Presentation has been a leader in Saudi Arabia's ICT landscape, delivering integrated technology solutions that help organizations accelerate digital transformation and improve operational efficiency. With a strong foundation in innovation and service excellence, 2P continues to provide end-to-end solutions through its specialized business units and trusted market expertise.

We are looking for a hands-on Cybersecurity Engineer to join our Cybersecurity Department, with a primary focus on the deployment, administration, and optimization of Endpoint Detection & Response (EDR) and Endpoint Protection Platform (EPP) technologies.

This is a platform ownership role, responsible for maintaining endpoint security tool health, policy compliance, platform currency, and complete asset coverage rather than a purely monitoring-focused position.

Key Responsibilities

Endpoint Security – EDR / EPP

• Deploy, configure, and maintain EDR/EPP agents across servers and workstations.
• Administer endpoint security platforms such as Kaspersky Endpoint Security, Kaspersky EDR, CrowdStrike, and Microsoft Endpoint Protection.
• Manage Kaspersky Security Center (KSC/KSCA), including policy deployment, agent management, task scheduling, and reporting.
• Configure and tune endpoint security policies, including:
• Detection and prevention policies
• Application control
• Device control
• Web and mail filtering
• Monitor endpoint coverage and agent health, identifying unmanaged, inactive, or offline endpoints.
• Ensure endpoint security policies remain current and consistently applied across the environment.
• Coordinate with the SOC team on detection-rule tuning and false-positive reduction.
• Manage platform upgrades, patch cycles, version updates, and vendor escalations.
• Produce regular reports covering endpoint coverage, platform health, policy compliance, and security posture.

Platform Ownership & Operations

• Maintain SOPs, operational procedures, and runbooks for assigned cybersecurity platforms.
• Participate in formal change management processes, including submission, review, testing, and implementation of change requests.
• Coordinate with cybersecurity vendors for technical support, escalations, renewals, and product roadmap updates.
• Support incident response activities related to endpoint security platforms.
• Troubleshoot platform, agent, connectivity, and policy-related issues.
• Work with infrastructure, server, network, and SOC teams to maintain reliable endpoint security coverage.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• 3–5 years of experience in Cybersecurity Infrastructure, Endpoint Security, or a related technical security role.
• Strong hands-on experience with EDR and EPP technologies.
• Practical experience with Kaspersky Endpoint Security and Kaspersky EDR, preferably Expert or Optimum tiers.
• Hands-on experience managing Kaspersky Security Center (KSC/KSCA).
• Experience with policy deployment, endpoint agent management, health monitoring, and security reporting.
• Good administration knowledge of Windows Server and Linux environments.
• Good understanding of firewalls, proxies, network segmentation, and endpoint-security connectivity requirements.
• Strong troubleshooting, documentation, and technical problem-solving skills.
• Ability to work effectively with SOC, infrastructure, networking, and vendor teams.

Preferred Technical Experience

• Kaspersky Endpoint Security / Kaspersky EDR
• Kaspersky Security Center (KSC/KSCA)
• CrowdStrike
• Microsoft Endpoint Protection
• EDR/EPP Policy Management
• Windows & Linux Administration
• Endpoint Agent Deployment
• Security Policy Compliance
• Change Management
• Incident Response Support