Security Platform Engineer: SIEM/EDR Specialist (Remote)

United States Digital Space LLC; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Remote-first

Quarterly bonuses

28 days paid annual leave

Core hours 10am-3pm in local time

Top-of-the-line equipment

Annual company retreats

Job summary

Sporty is seeking a remote-first Security Monitoring Engineer to manage EDR and SIEM platforms across endpoints, servers, cloud, and network infrastructure. You will tune rules, reduce false positives, and develop dashboards and use cases for proactive defense.

The role requires in-depth knowledge of endpoint security, log analysis, and MITRE ATT&CK, with strong documentation and communication skills. Remote work is encouraged with core hours and quarterly bonuses.

Qualifications

• Experience administering enterprise SIEM, XDR, or EDR platforms.
• Strong analytical and troubleshooting skills.
• Excellent documentation and communication skills.
• Experience tuning detection rules and reducing false positives.
• Familiarity with log collection, parsing, correlation, and security event analysis.
• Understanding of MITRE ATT&CK and common attacker techniques.
• Experience writing automation or scripting using Python, PowerShell, or Bash.

Responsibilities

• Administer, maintain, and monitor EDR and SIEM environments.
• Tune detection rules, correlation logic, and security policies to improve detection quality and reduce false positives.
• Configure and maintain endpoint policies, agent health, log collection, and platform integrations.
• Develop and maintain dashboards, reports, alerts, and security use cases.
• Investigate noisy or ineffective detections and continuously improve alert fidelity.
• Validate that endpoint protection, log collection, and response capabilities operate as expected.
• Integrate new log sources and improve visibility across endpoints, servers, cloud services, and network infrastructure.
• Convert findings from incidents, threat intelligence, vulnerability assessments, and offensive security exercises into improved monitoring content.
• Monitor platform health, storage, agent connectivity, licensing, and overall service availability.
• Support the Information Security team during security investigations by improving visibility, detections, and response workflows.
• Work with Infrastructure and IT teams to onboard new systems into EDR and SIEM.
• Produce operational documentation, standard operating procedures, and platform runbooks.
• Track detection coverage, platform performance, and continuous improvement initiatives.

Job description

Sporty is seeking a remote-first Security Monitoring Engineer to manage EDR and SIEM platforms across endpoints, servers, cloud, and network infrastructure. You will tune rules, reduce false positives, and develop dashboards and use cases for proactive defense.

The role requires in-depth knowledge of endpoint security, log analysis, and MITRE ATT&CK, with strong documentation and communication skills. Remote work is encouraged with core hours and quarterly bonuses.