Senior EDR Engineer - Incident Response & Cloud Security

Recorded Future; Boston (MA); On-site; USD 79,000 - 118,000; Full time

Benefits offered by this job

Health insurance

401(k) and stock options

Paid time off

Job summary

Recorded Future is seeking an EDR Security Engineer to manage and optimize endpoint detection and response platforms across a large, diverse environment. You will ensure telemetry integrity and effective detection logic in collaboration with the Incident Response team.

The role includes scripting for automation, cross-team collaboration, and after-hours support for incident containment. Qualified candidates will have 3+ years in enterprise EDR and relevant certifications.

Qualifications

• Minimum 3 years of enterprise EDR management experience.
• Proficient in scripting for automation and data querying.
• Strong understanding of endpoint telemetry and detection logic.

Responsibilities

• Oversee deployment and configuration of multiple EDR platforms across enterprise endpoints.
• Develop and refine detection policies and indicators to reduce false positives.
• Manage security across multi-cloud environments (AWS, Azure, GCP).
• Maintain integrations between EDR consoles and SIEM/SOAR platforms.
• Support incident response through containment and data collection.

Skills

EDR experience

Scripting (PowerShell/Python/Bash)

OS internals (Windows/Linux/macOS)

Networking (DNS, TCP/IP)

Cloud security services familiarity

Forensics

Security certifications (GCFA/GCIA)

Education

GCFA

GCIA

Tools

CrowdStrike

SentinelOne

Microsoft Defender for Endpoint

Splunk

XSOAR (Palo Alto)

Zscaler

Job description

Recorded Future is seeking an EDR Security Engineer to manage and optimize endpoint detection and response platforms across a large, diverse environment. You will ensure telemetry integrity and effective detection logic in collaboration with the Incident Response team.

The role includes scripting for automation, cross-team collaboration, and after-hours support for incident containment. Qualified candidates will have 3+ years in enterprise EDR and relevant certifications.