Remote Endpoint Security Engineer (EDR/XDR)

Socket.dev; Falls Church (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Remote work

Medical insurance

Dental insurance

Holidays and PTO

Phone and internet allowance

Retirement plan

Job summary

GuidePoint Security is seeking an experienced Endpoint Security Engineer to design, deploy, and operate active EDR/XDR capabilities across a large and diverse endpoint fleet in a remote-first US environment.

You will work directly with SOC analysts, IT operations, and application owners to tune policies, reduce false positives, and ensure rapid response during investigations. The role emphasizes hybrid and multi-cloud protection, with strong emphasis on automation and incident response.

Qualifications

• 7+ years in technical cybersecurity engineering or infrastructure security.
• 3–5 years engineering and administering EDR/XDR across 50k+ endpoints.

Responsibilities

• Engineer, deploy, and maintain NGAV and EDR/XDR agents across large endpoints.
• Partner with application owners to minimize false positives and downtime.
• Lead endpoint security escalations for SOC and IT operations during high-severity events.
• Extend protections to hybrid and multi-cloud workloads.

Skills

EDR/XDR engineering

SOC collaboration

Scripting (PowerShell/Python/Bash)

Threat hunting

Hybrid multi-cloud

Forensics

Behavioral analytics

Education

Bachelor's degree in CS/Cybersecurity

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

Job description

GuidePoint Security is seeking an experienced Endpoint Security Engineer to design, deploy, and operate active EDR/XDR capabilities across a large and diverse endpoint fleet in a remote-first US environment.

You will work directly with SOC analysts, IT operations, and application owners to tune policies, reduce false positives, and ensure rapid response during investigations. The role emphasizes hybrid and multi-cloud protection, with strong emphasis on automation and incident response.