Senior Endpoint IR Engineer (Remote) - SentinelOne XDR Lead

Barracuda; Detroit (MI); À distance; USD 110 000 - 130 000; Plein temps

Avantages offerts par ce poste

Equity options

Health benefits

Retirement plan

Career growth opportunities

Flexible time off

Volunteer opportunities

Résumé du poste

Barracuda is seeking a Senior Endpoint Security & IR Engineer to join our incident response team. You will lead management of our SentinelOne XDR platform, conduct complex investigations, drive rapid containment, and serve as a trusted advisor to clients during critical security events.

You’ll collaborate with our Cyber Concierge, Threat Analysts, and Automation teams to improve response capabilities, protect clients, and deliver executive-ready reports. This role requires 24/7 on-call readiness.

Qualifications

• Minimum of bachelor’s degree in computer science and 5+ years of hands-on experience in incident response, digital forensics, or security operations
• GIAC certification required; one or more of the following: GCIH, GCFA, GCFE, GNFA, OSCP/ECIR/EDFP/EnCE/SC-200/AZ-500 or equivalent
• Experience in MSSP, MDR, or consulting is strongly preferred; ability to manage multiple client engagements
• Experience working in multi-tenant environments with diverse security maturity levels
• Proven track record investigating real-world incidents including ransomware, BEC attacks, lateral movement, data exfiltration
• Proficiency with SentinelOne, Binalyze AIR, and Microsoft 365 Defender

Responsabilités

• Lead end-to-end incident response engagements across diverse client environments
• Perform host-based forensics using Binalyze AIR for remote evidence acquisition, triage, and analysis
• Design and tune detection rules within SentinelOne and protection policies
• Investigate alerts and threats including MITRE ATT&CK mapping
• Develop Python scripts for evidence collection and automated response actions
• Serve as the primary IR point of contact for client stakeholders during active incidents

Connaissances

Incident response

Digital forensics

Security operations

Multi-tenant environments

Client communication

Formation

Bachelor's degree in Computer Science

Outils

SentinelOne

Binalyze AIR

Microsoft 365 Defender

Databricks

Elastic

Tines

Python

Velociraptor

KAPE

Description du poste

Barracuda is seeking a Senior Endpoint Security & IR Engineer to join our incident response team. You will lead management of our SentinelOne XDR platform, conduct complex investigations, drive rapid containment, and serve as a trusted advisor to clients during critical security events.

You’ll collaborate with our Cyber Concierge, Threat Analysts, and Automation teams to improve response capabilities, protect clients, and deliver executive-ready reports. This role requires 24/7 on-call readiness.