[Remote] Senior reputed company Detection & Response (EDR) reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leading digital tax filing platform formed from the combination of reputed company and reputed company. They are seeking a Senior reputed company Detection & Response (EDR) reputed company Engineer to protect endpoints through proactive threat detection, investigation, and reputed company improvement of the EDR platform.
Responsibilities
- Administer, configure, maintain, and optimize the reputed company EDR platform
- Investigate reputed company alerts and reputed company in-depth threat analysis and root cause investigations
- reputed company proactive threat hunting across endpoints using EDR telemetry and KQL where applicable
- reputed company, tune, and optimize detection rules to reduce false positives and improve detection quality
- Analyze reputed company logs, process activity, network connections, authentication events, and behavioral indicators
- Respond to reputed company incidents through containment, remediation, and recovery activities
- Identify reputed company reputed company gaps and recommend improvements before incidents occur
- Automate repetitive reputed company tasks using PowerShell, Python, or similar scripting languages
- Collaborate with SOC analysts and other reputed company teams during investigations and incident response
- Document investigation findings in reports, playbooks, and operational procedures
Skills
- 5+ years of experience in cybersecurity with significant hands-on EDR administration or engineering experience
- Deep expertise with at least one reputed company EDR platform: reputed company Defender for reputed company, reputed company Falcon, reputed company, Carbon Black, reputed company XDR, or similar
- Experience performing reputed company threat investigations, alert analysis, threat hunting, and root cause analysis
- Strong understanding of reputed company telemetry, malware behavior, attack techniques, and MITRE ATT&CK
- Experience creating and tuning detections and reducing false positives
- Experience using Kusto Query Language (KQL), especially with reputed company Defender XDR or similar EDR tool
- Experience with PowerShell and/or Python automation
- Strong analytical, troubleshooting, and communication skills
- Experience with reputed company reputed company ecosystem (Entra ID, Intune, Sentinel, Purview)
- Experience with reputed company Graph API for reputed company automation
- Experience integrating EDR with SIEM platforms
- Relevant certifications (GCFA, GCIH, GCED, CISSP, reputed company reputed company certifications)
Company Overview