Senior Endpoint Security & IR Engineer (Remote)

Barracuda; Ann Arbor (MI); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Equity options

Health benefits

Retirement plan

Career growth

PTO & flexible time off

Volunteer opportunities

Job summary

Barracuda is seeking a Senior Endpoint Security & IR Engineer to lead incident response across multi-tenant environments. You will manage SentinelOne XDR, perform forensic investigations, and guide clients through containment and remediation with strong technical and communication skills.

You’ll work with Cyber Concierge and Automation teams to improve response capabilities, leveraging Python and automation to accelerate MTTR while serving client stakeholders.

Qualifications

• Minimum of bachelor’s degree in computer science and 5+ years of hands-on experience in incident response, digital forensics, or security operations.
• MSSP, MDR, or consulting experience is strongly preferred with multi-client engagements.
• GIAC or equivalent certifications are required (e.g., GCIH, GCFA, GCFE, GNFA).

Responsibilities

• Lead end-to-end incident response engagements across diverse client environments from triage to remediation.
• Perform host-based forensics and remote evidence collection using Binalyze AIR at scale.
• Design and tune detection rules in SentinelOne and Elastic; map to MITRE ATT&CK.
• Coordinate 24/7 on-call support and client-facing incident briefings.
• Collaborate with Threat Analysts and Automation teams to improve IR capabilities.

Skills

SentinelOne

Incident response

Digital forensics

Python scripting

Threat hunting

Windows

macOS

Linux

Education

Bachelor’s degree in computer science

Tools

Binalyze AIR

Elastic

Databricks

Tines

MITRE ATT&CK

Job description

Barracuda is seeking a Senior Endpoint Security & IR Engineer to lead incident response across multi-tenant environments. You will manage SentinelOne XDR, perform forensic investigations, and guide clients through containment and remediation with strong technical and communication skills.

You’ll work with Cyber Concierge and Automation teams to improve response capabilities, leveraging Python and automation to accelerate MTTR while serving client stakeholders.