Remote Senior Endpoint Security & IR Engineer

Barracuda; New Hampshire; Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Equity

Health benefits

Retirement plan

Career growth

Flexible PTO

Volunteer opportunities

Job summary

Barracuda is seeking a Senior Endpoint Security & IR Engineer to join our incident response team. You will lead management of SentinelOne XDR, conduct multi-client investigations, and drive rapid containment in a fast-paced MSSP environment.

Work with the Cyber Concierge and Automation teams to improve response capabilities, perform forensics, and deliver executive-ready incident reports to clients. A 24/7 on-call rotation applies.

Qualifications

• Bachelor’s degree or equivalent in computer science or related field.
• 5+ years in incident response, digital forensics, or security operations.
• MSSP/MDR or consulting experience preferred; manage multiple clients.
• Proven incidents investigations including ransomware, BEC, data exfiltration.
• Experience in multi-tenant environments; GIAC certification required.

Responsibilities

• Lead end-to-end incident response engagements across client environments.
• Perform host-based forensics and timeline analysis using Binalyze AIR.
• Design and tune detection rules in SentinelOne and Elastic.
• Develop Python scripts for evidence collection and automation.
• Build automated response workflows in Tines to speed containment.
• Serve as primary IR contact for client stakeholders and provide remediation guidance.

Skills

SentinelOne IR

Binalyze AIR forensics

Elastic SIEM

Microsoft 365 Defender

Python scripting

Threat hunting

Incident response

Multitenant MSSP

Education

Bachelor’s degree in computer science

Tools

SentinelOne

Binalyze AIR

Elastic

Databricks

Tines

Job description

Barracuda is seeking a Senior Endpoint Security & IR Engineer to join our incident response team. You will lead management of SentinelOne XDR, conduct multi-client investigations, and drive rapid containment in a fast-paced MSSP environment.

Work with the Cyber Concierge and Automation teams to improve response capabilities, perform forensics, and deliver executive-ready incident reports to clients. A 24/7 on-call rotation applies.