Endpoint Security Support Engineer

We are seeking an Endpoint Security Support Engineer responsible for supporting and administering BeyondTrust Endpoint Privilege Management (ePM) to secure and control privileged access across endpoint devices.Key responsibilities include privilege policy management, application control, troubleshooting ePM-related issues, security monitoring, policy compliance, and supporting endpoint security incidents.Key Responsibilities Act as the BeyondTrust ePM SME and L2 escalation point for complex BeyondTrust ePM incidents, requests, problems, and policy-related issues.Troubleshoot application elevation failures, blocked executables, policy delivery issues, agent or service health, endpoint inconsistencies, and interactions with other endpoint security controls.Analyze ePM events, policy results, workstyles, application groups, rules, logs, services, processes, and endpoint configurations to determine root cause and drive resolution.Administer, review, and troubleshoot ePM policies, privilege elevation controls, application control rules, messages, and exception handling while maintaining least-privilege standards.Test and document policy changes, expected results, risks, approvals, rollback steps, and production validation through established change processes.Partner with Engineering and Product teams on defects, policy design, upgrades, releases, and the transition of new capabilities into Operations.Coordinate with Service Desk, endpoint management, identity, network, application, infrastructure, and vendor teams to resolve cross-technology issues and reduce reassignment delays.Own vendor escalations by providing problem details, business impact, reproduction steps, logs, test evidence, and validation results.Guide L1 and L2 team members during investigations and improve escalation quality, evidence collection, and troubleshooting consistency.Identify gaps in runbooks, SOPs, triage guides, escalation procedures, and Knowledge Articles; create, publish, and maintain the required documentation.Develop and deliver training on ePM policy management, incident troubleshooting, log analysis, known issues, and operational procedures.Use incident trends, SLA performance, MTTR, recurring exceptions, and problem records to recommend service, monitoring, automation, and process improvements.Provide concise status updates covering technical findings, business impact, risks, dependencies, actions, and resolution progress. Required Skills and Qualifications Primary platform: BeyondTrust Endpoint Privilege Management (ePM)Experience: Cybersecurity, endpoint engineering, or security operations, including practical experience supporting and administering BeyondTrust ePM in an enterprise environment.Technical scope: Enterprise endpoints operating on Windows, Linux, and macOS, as well as supported Windows and Linux servers; ePM policy administration, troubleshooting complex ePM and endpoint issues, incident resolution, and operational support.Work expectations: Independent execution, partnership with Engineering and Product teams, demonstrated ability to produce clear operational documentation and deliver effective knowledge transfer, and the ability to support priority incidents and planned changes during the established work schedule and formally communicated support arrangements.Position Requirement Security Tools Operations requires a BeyondTrust Endpoint Privilege Management professional with practical experience supporting and administering ePM in an enterprise environment to serve as the BeyondTrust ePM SME.The Endpoint Security Support Engineer will provide L2 operational support and act as the primary technical escalation point for complex ePM incidents and policy issues. The Endpoint Security Support Engineer must have demonstrated production support experience, demonstrated expertise in ePM policy management and Windows troubleshooting, and the ability to work independently while partnering with Engineering, Product, Service Desk, application, infrastructure, and BeyondTrust Support teams.The Endpoint Security Support Engineer will resolve complex operational issues, improve support processes, close documentation and knowledge gaps, publish practical runbooks or Knowledge Articles, and train other Operations team members on ePM policy administration and troubleshooting.Location - São PauloWork Model -São PauloWell-being & BenefitsHealth, dental, and life insurance, meal and transportation vouchers, childcare assistance, Gympass, and 24/7 support through TCS Cares (psychological, legal, social, and financial assistance). Access to cultural, wellness, and recreational programs through the TCS-SESC partnership.Learning & Career DevelopmentGlobal career opportunities through access to the latest technologies, world-class learning platforms, professional certifications, and mentorship programs designed to accelerate growth and future-ready skills.Tata Consultancy Services is an equal opportunity employer. Our commitment to diversity and inclusion drives us to provide equal opportunities to all candidates who meet our required knowledge and competency needs, regardless of socio-economic background, race, color, national origin, religion, sex, gender identity, age, marital status, disability, sexual orientation, or any other characteristic.ID- 11022116