Senior Endpoint Security Engineer, EDR/XDR & Hybrid Cloud

PlanIT Group; Reston, Northern (VA, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

PlanIT Group in Reston, VA seeks an Endpoint Security Engineer to design, deploy, and operationalize EDR/XDR capabilities across a large, distributed fleet. You will work with EUC devices, on-premises servers, and multi-cloud workloads to maintain a strong security posture while minimizing business disruption.

You will partner with application owners and SOC teams, handle advanced forensics, threat hunting, and automated remediation, and contribute to policy tuning and evidence-based reporting.

Qualifications

• 7+ years in technical cybersecurity engineering or infrastructure security roles.
• 3–5 years engineering and administering EDR/XDR platforms across 50k+ endpoints.
• Experience supporting active SOC investigations and cross-functional collaboration with system owners.
• Bachelor's degree in CS, Cybersecurity, Information Systems (or 4 extra years of related experience).
• GIAC/CISSP or vendor credentials are a plus.

Responsibilities

• Design, deploy, and maintain NGAV and EDR/XDR agents across endpoints.
• Implement protections against zero-day malware, LOTLBs, fileless execution, credential dumping.
• Partner with application owners to minimize false positives and downtime.
• Serve as escalation lead for SOC analysts and IT operations during high-severity events.
• Extend security to multi-cloud workloads and private data centers.
• Measure and validate control efficacy with automated attack simulations and telemetry monitoring.

Skills

EDR/XDR Engineering

Behavioral Analysis & Threat Hunting

Hybrid Infrastructure & OS Internals

Automation & Scripting

AI/ML in Security

Education

Bachelor's degree (CS/Cybersecurity/IS)

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

SentinelOne

Job description

PlanIT Group in Reston, VA seeks an Endpoint Security Engineer to design, deploy, and operationalize EDR/XDR capabilities across a large, distributed fleet. You will work with EUC devices, on-premises servers, and multi-cloud workloads to maintain a strong security posture while minimizing business disruption.

You will partner with application owners and SOC teams, handle advanced forensics, threat hunting, and automated remediation, and contribute to policy tuning and evidence-based reporting.