MCP Security Operations Engineer

Position: MCP Security Operations Engineer

Location: Remote

Duration: 12+ Months

• Monitor and analyze MCP usage and detections across the organization.
• Identify unauthorized MCP servers, clients, and configurations on endpoints.
• Validate detections and eliminate false positives or stale records.
• Engage users to understand the business justification for MCP usage.
• Coordinate removal of unauthorized MCP servers and configuration files.
• Validate successful remediation through endpoint telemetry and follow-up scans.
• Track MCP detections from identification through remediation and closure.
• Manage approved MCP exceptions and prevent unnecessary remediation.
• Partner with Detection Engineering and endpoint teams to improve MCP detection coverage.
• Maintain reporting on MCP detections, outstanding remediation, exceptions, and trends.