Threat Response Engineer

Job Summary

Working remotely in a full-time capacity, the Threat Response Engineer will investigate and remediate security threats on customer endpoints, provide detailed reports on actions taken, and collaborate with various teams to enhance security strategies while participating in a 24x7 on-call rotation.

Key responsibilities

• Perform investigations into detected threats and utilize security products for analysis, containment, and remediation
• Provide customers with comprehensive reports detailing actions taken for environment cleanup and protection
• Collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams to innovate timely threat remediation methods

Required qualifications

• Strong analytical and problem-solving skills with experience in responding to security events and threats
• Experience with Endpoint Detection and Response (EDR) products such as CrowdStrike or Microsoft Defender for Endpoint
• Foundational understanding of Windows and MacOS operating systems
• Demonstrated curiosity and experience integrating AI tools to enhance workflows and problem-solving
• Ability to work Monday - Friday from 6:00am - 2:00pm MT and participate in a monthly on-call rotation