Remote Endpoint Security Engineer (EDR/XDR)

castaliasystems; Morrisville (NC); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401k matching

Generous PTO

Paid holidays

Professional training opportunities

Pet insurance

Job summary

Castalia Systems seeks an Endpoint Security Engineer to design, deploy, and operationalize EDR/XDR across an enterprise fleet. You will balance proactive protection with business continuity, working with end-users and owners to tune policies while providing tier-3/4 escalations to SOC analysts and IT staff.

The role covers hybrid and multi-cloud workloads, with emphasis on behavioral defense, incident response, and continuous validation of security controls across EUC devices, servers, and

Qualifications

• 7+ years in technical cybersecurity engineering or security roles.
• 3–5 years engineering and administering EDR/XDR platforms across 50k+ endpoints.
• Experience supporting active SOC investigations and cross-functional collaboration.
• Bachelor’s degree or equivalent enterprise experience.
• Expert-level EDR/XDR administration across Windows, macOS, Linux, and containers.

Responsibilities

• Engineer, deploy, and maintain NGAV and EDR/XDR agents at scale.
• Implement active protections against zero-day malware and fileless threats.
• Partner with application owners to baselining behavior and minimize false positives.
• Lead endpoint security escalation for SOC and IT during incidents.
• Extend protections across private data centers and multi-cloud workloads.

Skills

EDR/XDR engineering

Behavioral analysis

Automation scripting

Hybrid multi-cloud experience

Crisis leadership

Operational scale management

Stakeholder engagement

Education

Bachelor’s degree in CS/Cybersecurity/IS

Equivalent practical enterprise experience

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

SentinelOne

PowerShell

Python

SQL

KQL

Splunk SPL

YARA

Job description

Castalia Systems seeks an Endpoint Security Engineer to design, deploy, and operationalize EDR/XDR across an enterprise fleet. You will balance proactive protection with business continuity, working with end-users and owners to tune policies while providing tier-3/4 escalations to SOC analysts and IT staff.

The role covers hybrid and multi-cloud workloads, with emphasis on behavioral defense, incident response, and continuous validation of security controls across EUC devices, servers, and