Senior Endpoint Security Engineer

Job Summary

Leading incident response efforts, the full-time Senior Endpoint Security Engineer will manage the SentinelOne XDR platform, conduct complex investigations across client environments, and provide expert guidance during critical security events in a remote setting.

Key responsibilities

• Lead end-to-end incident response engagements, from initial triage through remediation
• Perform host-based forensics and analyze security incidents across various platforms, including Microsoft 365
• Develop and maintain automation scripts and detection rules to enhance incident response workflows

Required qualifications

• Bachelor's degree in computer science and 5+ years of incident response or digital forensics experience
• GIAC certification required, with one or more of the following: GCIH, GCFA, GCFE, GNFA
• Proven track record in managing multiple client engagements in a multi-tenant environment
• Experience with EDR platforms, particularly SentinelOne, and familiarity with DFIR tools
• Strong analytical skills in log analysis and threat hunting using platforms like Databricks