Threat Response Engineer

Job Summary

To support customer security, the full-time remote Threat Response & Remediation Engineer will drive investigations, contain threats, and deliver comprehensive remediation while ensuring clear communication and customer success from detection through resolution.

Key responsibilities

• Perform investigations into detected threats using EDR, Network, and Identity telemetry to analyze, contain, and remediate threats in customer environments
• Identify, scope, and manage ongoing customer incidents, developing remediation plans and providing thorough reports of actions taken
• Collaborate with cross-functional teams to develop new approaches to threat remediation and provide strategic insights for product improvement

Required qualifications

• 4+ years of cybersecurity experience with proven ability to independently investigate and analyze threats and respond to security incidents
• Working knowledge of EDR platforms such as CrowdStrike, Microsoft Defender for Endpoint, or others, along with familiarity with Information Security controls
• Deep understanding of Windows and macOS operating system internals and network communications, with functional knowledge of Linux systems
• Demonstrated curiosity and active exploration of AI tools to enhance workflows and problem-solving
• Excellent written and verbal communication skills to explain complex technical concepts to diverse audiences