Senior Endpoint Security Engineer - AI-Powered EDR/XDR

Triangle Cyber, LLC; Raleigh (NC); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

GCED

GCIH

GCFA

CISSP

Job summary

Triangle Cyber, LLC is seeking a Senior Endpoint Security Engineer to design, deploy, and operationalize behavioral EDR/XDR across a large enterprise network. You will leverage CrowdStrike Falcon, Defender, SentinelOne, and Splunk to safeguard the environment.

You will lead NGAV/EDR deployment, implement zero-day protections, and collaborate with owners to establish baselines. Strong scripting and AI/ML in security capabilities are essential.

Qualifications

• U.S. Citizenship required.
• 13+ years in cybersecurity engineering or infrastructure security roles.
• Experience with enterprise-grade EDR/XDR platforms across extensive endpoint environments.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience (17 years total).
• Proficiency in administering endpoint platforms across various operating systems.
• Expertise in behavioral analysis, threat hunting, and using query languages like SQL, KQL, and YARA.
• Strong programming skills in PowerShell, Python, or Bash for automation.
• Fluency in using AI/ML technologies to automate security activities.
• Ability to balance security controls with business operations, ensuring minimal disruption.
• Experience in crisis leadership, operational scale management, and policy automation.

Responsibilities

• Engineer, deploy, and maintain Next-Gen Antivirus (NGAV) and Endpoint Detection & Response (EDR/XDR) agents across endpoints.
• Implement behavioral protections against zero-day malware and APTs.
• Collaborate with application owners to establish baseline behavior profiles.
• Manage allowlisting, exception workflows, and phased ring deployments.
• Support SOC investigations and collaborate with system owners for enterprise security.

Skills

Threat hunting

Behavioral analysis

PowerShell

Python

Bash

SQL

KQL

YARA

AI/ML in security

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

CrowdStrike Falcon

Microsoft Defender

SentinelOne

Splunk

Job description

Triangle Cyber, LLC is seeking a Senior Endpoint Security Engineer to design, deploy, and operationalize behavioral EDR/XDR across a large enterprise network. You will leverage CrowdStrike Falcon, Defender, SentinelOne, and Splunk to safeguard the environment.

You will lead NGAV/EDR deployment, implement zero-day protections, and collaborate with owners to establish baselines. Strong scripting and AI/ML in security capabilities are essential.