Senior Endpoint Security & IR Engineer — Remote

Barracuda; Utah; Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Equity

High-quality health benefits

Retirement plan with employer match

Career-growth opportunities

Flexible Time Off

Volunteer opportunities

Job summary

Barracuda invites a Senior Endpoint Security & IR Engineer to join our incident response team. You will manage sentinelone XDR investigations, coordinate across client environments, and drive rapid containment of active threats in a fast-paced MSSP setting.

Collaborate with Cyber Concierge, Threat Analysts and Automation teams to improve response capabilities, and support 24/7 on-call rotations while delivering executive-ready reports and remediation guidance.

Qualifications

• Bachelor's degree in computer science or equivalent with 5+ years in incident response, forensics, or security operations.
• MSSP/MDR or consulting experience preferred, able to manage multiple client engagements.
• GIAC certification required; examples include GCIH, GCFA, GCFE, GNFA or equivalent certifications.
• Experience in multi-tenant environments with diverse security maturity levels.
• Strong written and verbal communication for client-facing incident briefings and executive-ready reports.

Responsibilities

• Lead end-to-end incident response engagements across diverse client environments from triage to remediation.
• Perform host-based forensics and evidence collection using Binalyze AIR.
• Design and tune detection rules in SentinelOne; analyze alerts and MITRE ATT&CK mappings.
• Develop automated IR workflows and scripts (Python) and integrate tooling (Tines, Elastic, Databricks).
• Serve as primary IR contact for clients and deliver post-incident reviews and remediation guidance.

Skills

Incident response

Digital forensics

Security operations

MSSP/MDR experience

Client engagement

SentinelOne

Python scripting

Education

Bachelor's degree in computer science

Tools

SentinelOne

Binalyze AIR

Elastic

Databricks

Tines

Microsoft 365 Defender

Azure Entra ID

Job description

Barracuda invites a Senior Endpoint Security & IR Engineer to join our incident response team. You will manage sentinelone XDR investigations, coordinate across client environments, and drive rapid containment of active threats in a fast-paced MSSP setting.

Collaborate with Cyber Concierge, Threat Analysts and Automation teams to improve response capabilities, and support 24/7 on-call rotations while delivering executive-ready reports and remediation guidance.