Endpoint Security Service Owner - Engineer

We are looking for a hands-on Endpoint Security Service Owner (Engineer) to join our Security Operations organization. In this role, you will be responsible for operating, maintaining, and continuously improving endpoint security services across cloud and hybrid-cloud environments supporting a global financial services organization.

You will work with technologies such as Wazuh, ClamAV, Microsoft Defender, and related security monitoring solutions to ensure strong endpoint protection, visibility, and threat detection capabilities. This role combines engineering, operational ownership, automation, troubleshooting, and close collaboration with Security Operations, Incident Management, Infrastructure, and Cloud teams.

This is not a governance or policy role. We are looking for an engineer who enjoys building, operating, and improving security platforms, takes ownership of services, and can work independently in a global environment. Strong hands-on experience with Wazuh is a mandatory requirement and will be a primary selection criterion.

Your key tasks

• Own and operate the Endpoint Security service
• Deploy, configure, and maintain Wazuh across Linux and Windows environments
• Manage and optimize ClamAV deployments and endpoint security agents
• Support and improve EDR/XDR capabilities, including Microsoft Defender
• Monitor platform health, agent coverage, and security telemetry
• Support threat investigations, incident response activities, and remediation efforts
• Automate operational tasks and continuously improve service efficiency
• Work closely with Security Operations, Infrastructure, Cloud, and Incident Management teams

• Proven hands-on experience deploying, configuring, and administering Wazuh in enterprise environments
• Experience managing and troubleshooting ClamAV
• Good understanding of endpoint security, threat detection, incident response, and security monitoring
• Experience with Linux administration and security tooling
• Experience with scripting or automation (Bash, Python, PowerShell, or similar)
• Familiarity with Microsoft Defender or other EDR/XDR platforms
• Strong troubleshooting, analytical, and problem-solving skills
• Ability to work independently, take ownership, and collaborate with global teams
• Good written and spoken English

It would be a real bonus if you have

• Experience with Oracle Cloud Infrastructure (OCI)
• Experience with Splunk SOAR or other security orchestration and automation platforms
• Experience integrating Wazuh with SIEM or SOAR solutions
• Experience with vulnerability management solutions such as Tenable
• Experience in banking, financial services, or other regulated environments
• Relevant security, Splunk, Microsoft, or OCI certifications

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices.

In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self.

We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way.

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.

#LI-Hybrid