Sr. Security Engineer - EDR ITP

CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.

The Team:

About the Role 

The Sr Security Engineer – Endpoint & Identity Threat Protection (EDR / ITP) is responsible for engineering, deploying, and optimizing advanced detection and response technologies that safeguard Mattel’s global enterprise. This senior technical role focuses on proactive endpoint detection, response automation, and identity threat protection, helping to strengthen the organization’s cyber defense posture. The position requires deep technical expertise across endpoint and identity protection technologies, strong collaboration skills, and a commitment to continuous improvement through automation, analytics, and security modernization initiatives. 

Roles and Responsibilities 

• Engineer, deploy, and maintain enterprise Endpoint Detection and Response (EDR) and Identity Threat Protection (ITP) platforms across Mattel’s environments. 

• Develop, tune, and optimize behavioral analytics and detection logic to identify, prevent, and respond to malicious activity targeting endpoints and identities. 

• Collaborate with Security Operations and Incident Response teams to investigate, contain, and remediate security incidents effectively and efficiently. 

• Integrate EDR and ITP technologies with SIEM, SOAR, and threat intelligence platforms to improve visibility, automation, and response capabilities. 

• Contribute to the architecture, implementation, and continuous enhancement of endpoint and identity threat protection strategies in alignment with Mattel’s cybersecurity goals. 

• Partner with IT, Infrastructure, and Security Architecture teams to support secure configuration management, policy enforcement, and system hardening across all endpoints. 

• Ensure endpoint and identity protection controls align with corporate security policies, compliance mandates, and global regulatory standards. 

• Perform advanced telemetry analysis, detection validation, and post-incident investigations to improve detection fidelity and reduce false positives. 

• Collaborate with Engineering, Cloud, and Infrastructure teams to ensure endpoint tools operate effectively across hybrid and cloud environments. 

• Develop and maintain documentation, operational standards, and playbooks for endpoint and identity threat protection workflows. 

• Participate in post-incident reviews to identify gaps, lessons learned, and opportunities to enhance security processes. 

• Evaluate emerging endpoint and identity threat protection technologies and contribute to technical proof-of-concept initiatives to support security modernization. 

Skills and Qualifications 

Required: 

• 5–7+ years of experience in cybersecurity engineering, with a focus on endpoint and identity threat protection in enterprise environments. 

• Demonstrated expertise managing enterprise-grade EDR and ITP platforms such as CrowdStrike, SentinelOne, Defender for Endpoint, or similar solutions. 

• Strong technical knowledge of endpoint operating systems (Windows, macOS, Linux) and adversary tactics, techniques, and procedures (TTPs). 

• Experience designing and optimizing detection logic, behavioral rules, and custom correlation within EDR and identity systems. 

• Proficiency in integrating endpoint and identity threat protection solutions with SIEM, SOAR, and automation platforms. 

• In-depth understanding of identity and access management (IAM) frameworks such as Azure AD, Okta, SSO, and MFA. 

• Experience in IOC and IOA analysis, enrichment, and use of threat intelligence for proactive defense and detection tuning. 

• Hands-on experience in scripting or automation using PowerShell, Python, or equivalent languages for workflow orchestration and data enrichment. 

• Strong understanding of endpoint configuration, policy management, application allowlisting, and device control. 

• Excellent communication and collaboration skills with the ability to work effectively across global and cross-functional teams. 

Preferred: 

• Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience). 

• Certifications such as GSEC, SSCP, GCED, GCIA, or CompTIA CySA+. 

• Experience supporting hybrid endpoint environments across on-premises, cloud (AWS, Azure, GCP), and virtualized systems. 

• Familiarity with the MITRE ATT&CK framework for mapping detections, validating coverage, and improving response maturity. 

• Hands-on experience with SOAR or orchestration platforms to enhance threat detection and response workflows. 

• Knowledge of modern endpoint protection trends, AI/ML-based detection models, and zero-trust security principles. 

Shift Timings: 

This position operates during 05:00 – 14:00 PST (17:30 – 02:30 IST), Monday through Friday, with emergency on-call duties as required. 

Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work:
We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Our Approach to Flexible Work:
We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.

Who We Are:
Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.

Visit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.

Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.

Videos to watch:
The Culture at Mattel
Corporate Philanthropy