Senior EDR Engineer: Incident Response & Cloud Protection

Recorded Future, Inc.; EE. UU.; Presencial; USD 79.000 - 118.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Incentive compensation

Equity

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) plan

Descripción de la vacante

Recorded Future, Inc. is seeking an EDR Security Engineer to manage endpoint detection across a diverse environment and support incident response. Administer multiple EDR platforms, tune detection logic, and assist with after-hours containment when needed.

Collaborate with IR and engineering teams to implement policy changes, automate tasks with scripting, and maintain documentation. Requires 3+ years in EDR and cloud security experience.

Formación

• Minimum of 3 years of professional experience managing EDR solutions in an enterprise environment.
• Proficiency in PowerShell, Python, or Bash for automation and data querying.
• Strong knowledge of Windows, macOS, and Linux internals.
• Understanding of TCP/IP, DNS, and proxy configurations related to agent-to-console communications.
• Experience with cloud security services (AWS, Azure, or GCP).
• Experience with secondary security platforms such as Splunk, Tines, XSOAR, or Zscaler.
• Familiarity with digital forensics and threat hunting methodologies.
• Relevant certifications such as GCFA or GCIA.
• Ability to diagnose complex technical issues within the security stack.

Responsabilidades

• EDR Administration & Fleet Health: Oversee deployment, lifecycle management, and configuration of EDR platforms.
• Policy & Detection Engineering: Develop and refine detection policies and indicators.
• Cloud Workload Protection: Manage security deployments across multi-cloud environments.
• Systems Integration & Tooling Support: Maintain integrations between EDR consoles and SIEM/SOAR.
• Incident Response Support: Assist IR analysts during active incidents and post-incident hardening.
• Operational Reliability & Documentation: Follow change management and maintain SOPs.

Conocimientos

EDR management

Scripting (PowerShell, Python, Bash)

Multi-OS knowledge

Networking basics

Cloud security familiarity

Detection engineering

Forensics & threat hunting

GCFA/GCIA certifications

Problem solving

Herramientas

Splunk

Tines

Palo Alto XSOAR

Zscaler

Audit & DLP tools

Descripción del empleo

Recorded Future, Inc. is seeking an EDR Security Engineer to manage endpoint detection across a diverse environment and support incident response. Administer multiple EDR platforms, tune detection logic, and assist with after-hours containment when needed.

Collaborate with IR and engineering teams to implement policy changes, automate tasks with scripting, and maintain documentation. Requires 3+ years in EDR and cloud security experience.