Security Engineering plays a critical role in protecting enterprise endpoint and server environments across Windows, macOS, and Linux platforms. This position drives secure configuration management, system hardening, and endpoint security enablement while balancing operational resilience and risk reduction. The role partners across technical teams to maintain consistent security engineering standards and strengthen the organization's security posture. **How you will make an impact:** - Design, test, and implement endpoint and server security configuration changes through established change control processes. - Administer, troubleshoot, and maintain endpoint security platforms, including EDR solutions, host-based firewalls, and related security controls. - Analyze system, endpoint, and security event logs within SIEM platforms to identify risks, trends, control gaps, and improvement opportunities. - Coordinate investigations and issue resolution activities with vendor support teams for security tools and platforms. - Execute baseline analysis activities and implement system hardening enhancements aligned with approved security standards. - Consult with internal teams on security requirements, configuration concerns, and risk-based remediation approaches. - Track project activities and document security controls, configuration decisions, testing outcomes, and implementation status. **The must haves:** - **Experience:** 4+ years of cybersecurity, security engineering, infrastructure security, or endpoint/server security experience. - Must be a US Citizen. - Application of TCP/IP networking concepts, operating system security concepts, and endpoint/server hardening practices. - Experience supporting EDR, host-based firewall, SIEM, vulnerability assessment, and configuration baseline tools, including log analysis and troubleshooting. - Application of security configuration standards and frameworks, including CIS Benchmarks, NIST guidance, Zero Trust, and least privilege principles. - Demonstrated attention to detail, analytical thinking, and problem-solving skills. - Ability to work independently and collaboratively across technical teams. - Application of least privilege and Zero Trust access control principles across endpoint and server environments. **Nice to haves:** - Experience identifying automation opportunities for recurring security tasks and operational efficiency improvements. - Experience promoting secure practices and security engineering standards across an enterprise environment. - Experience with scripting or automation. - Ability to support after-hours maintenance activities as needed during US Eastern business operations. Pay Range: USD 101,600 - 145,000 Pay ranges at Ciena are designed to accommodate variations in knowledge, skills, experience, market conditions, and locations, reflecting our diverse products, industries, and lines of business. Please note that the pay range information provided in this posting pertains specifically to the primary location, which is the top location listed in case multiple locations are available. Non-Sales employees may be eligible for a discretionary incentive bonus, while Sales employees may be eligible for a sales commission. In addition to competitive compensation, Ciena offers a comprehensive benefits package, including medical, dental, and vision plans, participation in 401(K) (USA) & DCPP (Canada) with company matching, Employee Stock Purchase Program (ESPP), Employee Assistance Program (EAP), company-paid holidays, paid sick leave, and vacation time. We also comply with all applicable laws regarding Paid Family Leave and other leaves of absence.