EDR Security Engineer

Key Responsibilities:

EDR Administration & Fleet Health: Manage deployment, lifecycle, and configuration of enterprise EDR platforms (e.g., CrowdStrike, SentinelOne, Microsoft Defender for Endpoint). Monitor and maintain agent health across all endpoints, troubleshooting failures and performance issues to meet service levels.

Policy & Detection Engineering: Develop and refine detection policies and indicators to enhance detection rates and minimize false positives. Translate threat intelligence into actionable endpoint rules for high-fidelity alerting.

Cloud Workload Protection: Manage security deployments across multi-cloud environments (AWS, Azure, GCP). Ensure consistent telemetry and protection for virtual machines and containerized workloads using cloud-native security services.

Systems Integration & Tooling Support: Collaborate with engineering teams to maintain integrations between EDR consoles and existing SIEM/SOAR platforms. Provide secondary technical support for auxiliary security tools, including Audit and Data Loss Prevention (DLP) systems.

Incident Response Support: Assist IR analysts during active security incidents by performing endpoint containment, executing live response scripts, and conducting remote data collection. Help restore systems and harden endpoint policies post-incident.

Operational Reliability & Documentation: Follow formal change management processes for policy modifications. Maintain technical documentation, Standard Operating Procedures (SOPs), and configuration baselines for internal stakeholders.