Remote Endpoint Security Engineer (EDR/XDR)

Socket.dev; Falls Church, Northern (VA, KY); Hybrid; USD 120,000 - 200,000; Full time

Benefits offered by this job

Remote work

Group Medical Insurance

Group Dental Insurance

Flexible Time Off

Phone & internet allowance

Retirement plan

Pet Benefit

Job summary

GuidePoint Security is seeking an Endpoint Security Engineer to balance proactive protection with business continuity. You will design, deploy, and operationalize active, behavior-based endpoint detection and response across a vast enterprise including EUC devices, servers, and multi-cloud workloads.

You will partner with applications and IT teams while handling tier-3/4 escalations during investigations. The role requires 7+ years in cybersecurity engineering, expertise with NGAV/EDR platforms,

Qualifications

• 7+ years of progressive cybersecurity engineering or infrastructure security experience.
• 3–5 years engineering and administering enterprise EDR/XDR platforms across large endpoints.
• Experience supporting active SOC investigations and cross-functional collaboration.

Responsibilities

• Engineer, deploy, and maintain NGAV and EDR/XDR agents across hundreds of thousands of endpoints.
• Provide tier-3/4 escalations during active investigations and investigations support.
• Perform host forensics, memory analysis, and script-based remediation.
• Drive automation and policy deployment across multi-cloud environments.

Skills

EDR/XDR engineering

Threat hunting

Incident response

Automation scripting

Cross-functional collaboration

Windows/Linux kernels

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

SentinelOne

Splunk

Job description

GuidePoint Security is seeking an Endpoint Security Engineer to balance proactive protection with business continuity. You will design, deploy, and operationalize active, behavior-based endpoint detection and response across a vast enterprise including EUC devices, servers, and multi-cloud workloads.

You will partner with applications and IT teams while handling tier-3/4 escalations during investigations. The role requires 7+ years in cybersecurity engineering, expertise with NGAV/EDR platforms,