EDR Engineer / Senior EDR Engineer

Overview

EDR Security Engineer responsible for technical administration, configuration, and maintenance of Endpoint Detection and Response (EDR) platforms as part of the Incident Response team.

What you'll do

• Oversee deployment, lifecycle management, and configuration of multiple enterprise EDR platforms.
• Monitor and maintain endpoint agent health, troubleshooting failures and performance issues.
• Develop and refine detection policies and indicators, reducing false positives.
• Translate threat intelligence into actionable endpoint rules for high-fidelity alerting.
• Manage security deployments across multi-cloud environments (AWS, Azure, or GCP) for VMs and containers.
• Maintain integrations between EDR consoles and SIEM/SOAR platforms and provide secondary tooling support.
• Support incident response via endpoint containment, live response scripts, remote data collection, and post-incident restoration/hardening.

What you'll need

• Minimum 3 years of professional experience managing EDR solutions in an enterprise environment.
• Proficiency in PowerShell, Python, or Bash for automation and large-scale querying.
• Comprehensive knowledge of Windows, macOS, and Linux internals (processes, registry/config files, logging).
• Understanding of TCP/IP, DNS, and proxy configurations for agent-to-console communication.
• Technical familiarity with AWS, Azure, or GCP security services (e.g., GuardDuty, Microsoft Defender for Cloud).
• Experience with secondary security platforms such as Splunk, Tines, Palo Alto XSOAR, or Zscaler.

Details

• Work location: Remote - USA.
• May require occasional after-hours availability for urgent incident containment and system restoration.