AT&T Services, Inc. · USA:NC:Charlotte / Ibm Dr - Adm:8505 Ibm Drremote

Salary
$128,400–$192,600from the description
Posted
Jul 1, 2026
Location
USA:NC:Charlotte / Ibm Dr - Adm:8505 Ibm Dr
Last confirmed open
Jul 20, 2026

What this job asks for AI summary

A hands-on engineering role focused on maintaining and improving enterprise endpoint security tools — including EDR, DLP, VPN, secure web access, and endpoint visibility platforms — at large scale. The work involves Tier-3 troubleshooting, policy tuning, baseline standardization, and extending AI-driven automation for alert triage, risk scoring, and exception handling. Suits engineers with at least three years in endpoint security who have practical experience applying automation or analytics to security operations.

Senior level · 3+ years · Remote · Full-time

Must have (6)
EDR, Sentinelone, Microsoft Defender or Cortex XdrDLP, Microsoft Purview or ForcepointVPN or Palo Alto GlobalprotectWindowsiOSAndroid
Nice to have (6)
TaniummacOSLinuxPowerShell or PythonREST APIsCompTIA Security+

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

Roughly 1,400 people nationally plausibly meet what this posting asks for (information security analysts). range 590–3,050

Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.

What gives you an edge
iOS12%Android14%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
EDR40%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $132,021 (middle half $99,961–$167,095). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (6)

The job posting explicitly states this is a 5-days-per-week on-site role in Charlotte, NC (#LI-Onsite). The caller has instructed that it be treated as fully remote with a national candidate pool — this overrides the posting's stated location requirement.

AI and automation experience is listed under a dedicated 'AI & Automation Experience (Required or Strongly Preferred)' heading. The posting hedges with 'Required or Strongly Preferred,' creating genuine ambiguity; these skills are captured at the platform/tool level (EDR, DLP, etc.) rather than as a standalone 'AI' skill, since no specific AI tool or platform is named.

Proxy/Secure Web Access and endpoint visibility platforms are called out as required responsibilities but no single named tool is firmly gated on beyond Tanium (mentioned as an example with 'or equivalent'), so Tanium is marked preferred.

Scripting (PowerShell, Python) and REST APIs appear only under 'Preferred Qualifications' and are marked accordingly.

Security certifications (CompTIA Security+, Microsoft Security, Tanium) appear only under 'Preferred Qualifications.'

Caller marked this a fully-remote role — scored against the national candidate pool.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗