Security Tools Manager

Company Overview

Group/Division

Job Description/Preferred Qualifications

We are seeking a Security Tools Manager to lead the strategy, deployment, and operations of endpoint security technologies across the enterprise. This role owns the endpoint security toolset end-to-end - from architecture and implementation to daily operations and continuous improvement - while managing a team of engineers and partnering closely with SOC, IT, and infrastructure teams. This role combines hands-on technical leadership with people and program management, ensuring endpoints are protected against modern threats while maintaining usability and business productivity.

Endpoint Security & Tools Ownership

• Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection, device control, DLP and endpoint privilege management agents.

• Lead the design, deployment, configuration, and optimization of endpoint security tools across Windows, macOS, and Linux environments.

• Ensure endpoint security tools integrate effectively with SIEM, SOAR, SOC workflows, and identity platforms.

• Define endpoint hardening standards, baselines, and security policies.

Operations & Incident Response

• Oversee endpoint-related security incidents, investigations, and remediation efforts.

• Partner with SOC teams to improve detection, response, and automation related to endpoint threats.

• Manage tool health, agent performance, upgrades, and lifecycle management.

• Drive root cause analysis and continuous improvement following incidents.

People & Program Management

• Lead, mentor, and develop a team of endpoint security engineers.

• Prioritize work, manage roadmaps, and track delivery of endpoint security initiatives.

• Establish operational processes, documentation, and KPIs for endpoint security tooling.

• Manage vendor relationships, licensing, and renewals.

Strategy & Stakeholder Collaboration

• Define the security agents roadmapaligned with Zero Trust and defense-in-depth strategies.

• Partner with Cybersecurity, IT operations, desktop engineering, IAM, and compliance teams to balance security and user experience.

• Evaluate new endpoint security technologies and lead POCs and rollouts.

Preferred Qualifications

• Experience integrating endpoint tools with SIEM/SOARplatforms (Elastic, Google SecOps, etc.).

• Familiarity with MDM/MAMsolutions (Intune, JAMF, Workspace ONE).

• Experience in regulated or large enterprise environments.

• Certifications such as CISSP, GCED, GCIA, SentinelOne, Proofpoint, or CyberArk certifications.

Minimum Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).

• 10+ years of experience in endpoint security or endpoint engineering, with 4+ years in a lead or management role.

• Strong hands-on experience with one or more endpoint security platforms such as:

  • EDR : SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black

  • DLP: Forcepoint, Proofpoint and Digital Guardian

  • EPM: CyberArk, Beyond Trust

• Experience managing enterprise endpoint environments (Windows/macOS; Linux a plus).

• Solid understanding of endpoint attack techniques and MITRE ATT&CK.

Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us attalent.acquisition@kla.com or at +1-408-352-2808 to request accommodation.

Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment. Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA. Please ensure that you have searched KLA's Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to talent.acquisition@kla.com to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.