Lead Endpoint Cybersecurity Engineer

TIAA

Confirmed live today High trust
Closes in 3 days Hybrid

Quick summary

Work type
Hybrid
Location
Dallas, TXCharlotte, NCIselin, NJ
Employment
Full-time
Posted
12 days ago
Freshness
Confirmed live today
Closes
Oct 30, 2026 (soon)

Market check

Salary context

How this pay compares to similar roles

Similar $180k
$119k $231k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $151,475–$209,187.

Based on 240 similar postings.

Employer

About TIAA

TIAA (Teachers Insurance and Annuity Association of America) is a leading Fortune 100 financial services organization and a premier provider of retirement services in the academic, research, medical, cultural, and governmental fields.

TIAA currently has 20 open roles on FindRole.

Most-posted roles

View all roles at TIAA

At a glance

TL;DR · Lead Endpoint Cybersecurity Engineer

The Lead Endpoint Cybersecurity Engineer serves as a senior technical lead within the internal Endpoint Engineering charter, overseeing the design, deployment, and maintenance of enterprise cybersecurity technologies. This role involves managing security applications across Windows, macOS, Linux, VDI, and server environments. Key responsibilities include leading the deployment of an enterprise deception framework and implementing AI Detection and Response capabilities to counter emerging agentic-AI threats. The engineer will perform root-cause analysis, conduct regression testing, and develop technical standards while utilizing APIs and configuration-management platforms for automation. Required skills include experience with security technology POCs, EDR, and deception solutions. The role addresses the technical challenge of ensuring endpoint stability, interoperability, and performance while integrating complex security telemetry into existing SIEM, SOAR, and identity workflows.

What you'll do

  • Design, configure, deploy, and maintain endpoint cybersecurity applications across Windows, macOS, Linux, VDI, and server environments.
  • Lead the technical implementation and optimization of the enterprise cyber deception framework and AI Detection and Response (AIDR) capabilities.
  • Perform root-cause analysis and provide senior-level break/fix support for agent health, policy conflicts, and deployment failures.
  • Conduct stability, regression, and performance testing to quantify CPU and memory overhead for concurrent cybersecurity agents.
  • Develop technical standards, runbooks, operating procedures, and implementation documentation for endpoint security technologies.
  • Identify and implement automation opportunities using scripting, APIs, and configuration-management platforms.
  • Validate the integration of endpoint telemetry with existing EDR, XDR, SIEM, and SOAR security workflows.
  • Provide technical leadership and recommendations for production-readiness before deploying security updates or new technologies.

What we're looking for

  • 5+ years of experience with security technology POCs, product evaluations, and production deployments.
  • Hands-on experience engineering and supporting enterprise deception or other endpoint cybersecurity solutions.
  • 7+ years of experience (preferred).
  • University degree (preferred).
  • CISSP, GIAC, Microsoft security, CrowdStrike, or comparable industry certifications (preferred).
  • Technology, Engineering, or equivalent professional experience (preferred).
  • Experience translating security architecture and risk requirements into endpoint engineering implementations (preferred).
  • Previous technical leadership or mentoring experience (preferred).

More like this

Similar roles

Lead Engineer, Email and Data Protection

Target

Brooklyn Park, MN 78 days ago
Java Spring Boot Google Cloud Platform AWS Azure Kubernetes Docker Kafka Pub/Sub RabbitMQ JMS RESTful APIs CI/CD Strelka Google Security Operations SMTP MIME Observability distributed-systems
7+ yrs exp Hybrid

Lead Engineer Cyber AI

Target

Brooklyn Park, MN 47 days ago
Python Machine Learning Cybersecurity Software Development Distributed Systems Incident Response Threat Detection Application Security Penetration Testing Rapid Prototyping Data Lifecycle Management
7+ yrs exp Hybrid

Cybersecurity Engineer Team Lead

Booz Allen Hamilton

North Las Vegas, NV 25 days ago $99,000–$225,000
Incident Response SIEM Firewalls Log Analysis SOC Operations Post-incident Analysis Root-cause Remediation CISM CEH
7+ yrs exp

Product Engineer, Endpoint Security

Allstate

Remote (IL) 7 days ago $90,700–$153,925
CrowdStrike Falcon Microsoft Defender for Endpoint BeyondTrust Privileged Access Management (PAM) Python PowerShell GitHub API Management EDR SIEM Microsoft Sentinel SOAR DevOps SecOps Incident Response Threat Detection Firewall Management Scripting
3+ yrs exp Remote

Lead Cybersecurity Engineer

Visa

Foster City, CA 61 days ago $200,000–$320,000
Python Go Azure AWS Terraform GenAI GitOps Infrastructure‑as‑Code policy‑as‑code CSPM CNAPP SIEM Sumo Logic ADX Wiz Prisma Cloud Microsoft Defender for Cloud API LLM Threat Intelligence
10+ yrs exp Hybrid

Lead Cyber Security Engineer

Northern Trust

Chicago, IL 88 days ago
Zscaler DLP Broadcom Layer7 API Gateway Microsoft Purview CASB Endpoint DLP Azure Security Services SIEM Kubernetes CI/CD DevOps MySQL Linux Unix SSL/TLS DNS Firewall Helm YAML Encryption Disaster Recovery
7+ yrs exp