EDR Engineer / Senior EDR Engineer

About the role

The EDR Security Engineer is responsible for the technical administration, configuration, and maintenance of Endpoint Detection and Response platforms. As a member of the Incident Response team, this role ensures the integrity of endpoint telemetry and the effectiveness of detection logic across a diverse environment.

Responsibilities

• Oversee the deployment, lifecycle management, and configuration of multiple enterprise EDR platforms.
• Monitor and maintain agent health across all managed endpoints, troubleshooting failures and performance issues.
• Develop and refine detection policies and indicators to improve detection rates and minimize false positive alerts.
• Manage security deployments across multi-cloud environments including AWS, Azure, or GCP.
• Maintain integrations between EDR consoles and existing SIEM/SOAR platforms.
• Assist IR analysts during active security incidents by performing endpoint containment and remote data collection.
• Maintain clear technical documentation, Standard Operating Procedures, and configuration baselines.

Required skills

• EDR
• PowerShell
• Python
• Bash
• Windows
• macOS
• Linux
• TCP/IP
• DNS
• Cloud security
• Digital forensics

Nice to have

• Splunk
• Tines
• Palo Alto XSOAR
• Zscaler

Certifications

• GCFA
• GCIA

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• 401K

About the Company

Recorded Future is the world’s most advanced and largest intelligence company, serving over 1,900 clients worldwide with a team of over 1,000 intelligence professionals.