Position: MCP Security Operations Engineer
Location: Remote
Duration: 12+ Months
- Monitor and analyze MCP usage and detections across the organization.
- Identify unauthorized MCP servers, clients, and configurations on endpoints.
- Validate detections and eliminate false positives or stale records.
- Engage users to understand the business justification for MCP usage.
- Coordinate removal of unauthorized MCP servers and configuration files.
- Validate successful remediation through endpoint telemetry and follow-up scans.
- Track MCP detections from identification through remediation and closure.
- Manage approved MCP exceptions and prevent unnecessary remediation.
- Partner with Detection Engineering and endpoint teams to improve MCP detection coverage.
- Maintain reporting on MCP detections, outstanding remediation, exceptions, and trends.