EDR Security Engineer

Job Summary

Managing the technical administration and configuration of Endpoint Detection and Response (EDR) platforms, the full-time EDR Security Engineer will ensure endpoint telemetry integrity and detection logic effectiveness while supporting incident response efforts in a remote setting.

Key responsibilities

• Oversee deployment and lifecycle management of multiple EDR platforms, ensuring agent health and troubleshooting issues
• Develop detection policies and indicators to enhance detection rates and minimize false positives
• Assist incident response analysts during security incidents, performing endpoint containment and data collection

Required qualifications

• Minimum of 3 years of experience managing EDR solutions in an enterprise environment
• Proficiency in scripting languages such as PowerShell, Python, or Bash
• Comprehensive knowledge of Windows, macOS, and Linux internals
• Technical familiarity with AWS, Azure, or GCP security services
• Experience with secondary security platforms like Splunk or Palo Alto XSOAR