Senior Endpoint Detection Engineer (EDR/XDR)

InfoSec People Ltd; West of England; Hybrid; GBP 51,000 - 85,000; Full time

Benefits offered by this job

Annual bonus

Pension contribution

Private healthcare

Life assurance

Staff discount

Flexible hybrid working

Excellent training and certification

Career progression

Job summary

InfoSec People Ltd in the United Kingdom is hiring a Senior EDR Engineer to join a growing security function. You will own enterprise EDR/XDR deployments across a complex environment and work with Cyber Defence, Incident Response, Threat Intelligence and Security Architecture teams.

This role focuses on engineering, tuning and threat hunting of Defender XDR, CrowdStrike Falcon and SentinelOne, building detections with KQL, and maturing incident response capabilities.

Qualifications

• Experience engineering enterprise EDR/XDR platforms.
• Hands-on threat hunting experience.
• Strong knowledge of Defender XDR and related cyber defence tooling.
• Proficiency with KQL and threat detection development.
• Experience supporting incident response investigations.
• Familiarity with MITRE ATT&CK framework.

Responsibilities

• Engineering and optimising Microsoft Defender XDR, CrowdStrike Falcon and SentinelOne
• Developing advanced threat detections and hunting capabilities
• Building and tuning KQL queries within Defender XDR and Microsoft Sentinel
• Supporting cyber incident investigations and response activities
• Improving detection coverage using threat intelligence and attack simulation outcomes
• Defining EDR policies, standards and best practices
• Supporting platform integrations across the wider security technology estate
• Acting as the technical SME for endpoint security technologies

Skills

EDR/XDR experience

Microsoft Defender XDR

Threat hunting

KQL

Incident response

MITRE ATT&CK knowledge

Tools

CrowdStrike Falcon

SentinelOne

Defender XDR

Job description

InfoSec People Ltd in the United Kingdom is hiring a Senior EDR Engineer to join a growing security function. You will own enterprise EDR/XDR deployments across a complex environment and work with Cyber Defence, Incident Response, Threat Intelligence and Security Architecture teams.

This role focuses on engineering, tuning and threat hunting of Defender XDR, CrowdStrike Falcon and SentinelOne, building detections with KQL, and maturing incident response capabilities.