Description

Design and maintain enterprise Endpoint Detection and Response (EDR) architecture, federation strategies, and hardening specifications.

This role is on-site.

Responsibilities

• Engineer pathways to integrate EDR data into SIEM and intelligence feeds.
• Collaborate with SOC engineers and analysts on incident response, containment, and risk reduction.
• Manage feature updates, system documentation, and vendor relationships.
• Participate in incident handling processes including discovery, analysis, tracking, and recovery.

Required Skills

• 5+ years of experience engineering and implementing enterprise EDR products.
• Strong knowledge of incident response, incident handling, and incident escalation.
• Deep understanding of network security, firewalls, IDS, and policy management.
• Expertise in vulnerability assessment, patch management, and logging/monitoring.
• Proficiency in information security strategies and common attack vectors.
• CISSP, CISA, or GSEC certification required.
• Ability to translate technical security information for non-technical audiences.

Preferred Skills

• GIAC certification.
• Analytical skills for solving complex security problems and performing incident verification.

Key Skills

Education

Any Graduate