Senior Endpoint IR Engineer - Remote, MSSP/MDR

Forensic Focus; Illinois; Remote; USD 150,000 - 190,000; Full time

Job summary

Forensic Focus seeks a Senior Endpoint Security Engineer to lead incident response across client environments in Illinois. You will perform host-based forensics, evidence collection, threat hunting, and deliver client-facing reports.

The role requires hands-on analytics in MSSP/MDR settings and proficiency with SentinelOne XDR, Binalyze AIR, Elastic, Databricks, Python, and Tines, with remote work options.

Qualifications

• 5+ years in incident response, forensics, or security operations.
• Experience in MSSP/MDR environments preferred.
• Hands-on host-based forensics, threat hunting, and incident reporting.

Responsibilities

• Lead incident response engagements across multiple client environments.
• Perform host-based forensics and evidence acquisition.
• Produce client-facing incident reports and timelines.

Skills

Incident Response

Digital Forensics

Security Operations

MSSP/MDR experience

Tools

SentinelOne XDR

Binalyze AIR

Elastic

Databricks

Python

Tines

Job description

Forensic Focus seeks a Senior Endpoint Security Engineer to lead incident response across client environments in Illinois. You will perform host-based forensics, evidence collection, threat hunting, and deliver client-facing reports.

The role requires hands-on analytics in MSSP/MDR settings and proficiency with SentinelOne XDR, Binalyze AIR, Elastic, Databricks, Python, and Tines, with remote work options.