EDR Engineer – Senior EDR Engineer

Recorded Future

. Oversee deployment, lifecycle management, and configuration of multiple enterprise EDR platforms, including CrowdStrike, SentinelOne, and Microsoft Defender for Endpoint .

Posted 9/17/2026full-timeRemote • Massachusetts • United StatesSenior💰 $78,500 - $117,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing enterprise EDR platforms, including CrowdStrike, SentinelOne, and Microsoft Defender for Endpoint, while ensuring effective incident response and endpoint protection across multi-cloud environments. Proficient in automation and scripting with PowerShell, Python, or Bash, alongside a strong understanding of system internals and security protocols.

Highest-signal resume keywords

EDR ManagementPowerShell ScriptingAWS Security ServicesIncident ResponseDigital Forensics

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

EDR Solutions ManagementPowerShellPythonBashWindows InternalsMacOS InternalsLinux InternalsTCP/IPDNSProxy Configurations

Soft Skills

Problem SolvingTechnical SupportCollaboration

Tools & Technologies

CrowdStrikeSentinelOneMicrosoft Defender for EndpointSplunkTinesPalo Alto XSOARZscalerSIEMSOAR

Certifications & Qualifications

GCFAGCIA

Industry Keywords

Endpoint Detection and ResponseThreat IntelligenceChange ManagementTelemetryContainerized Workloads

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoogle Cloud PlatformLinuxMacOSPythonSplunkTCP/IP

About the role

Key responsibilities & impact

Oversee deployment, lifecycle management, and configuration of multiple enterprise EDR platforms, including CrowdStrike, SentinelOne, and Microsoft Defender for Endpoint
Monitor and maintain agent health across managed endpoints, troubleshooting failures and performance issues
Develop and refine detection policies and indicators to improve detection rates and minimize false positives
Translate threat intelligence into actionable endpoint rules for high-fidelity alerting
Manage security deployments across AWS, Azure, or GCP multi-cloud environments
Ensure consistent telemetry and protection for virtual machines and containerized workloads
Maintain integrations between EDR consoles and SIEM/SOAR platforms
Provide secondary technical support for Audit and DLP tools
Assist incident response analysts with endpoint containment, live response scripts, and remote data collection
Assist with system restoration and post-incident endpoint policy hardening
Follow formal change management processes for policy modifications
Maintain technical documentation, SOPs, and configuration baselines for internal stakeholders

Requirements

What you’ll need

Minimum of 3 years of professional experience managing EDR solutions in an enterprise environment
Proficiency in PowerShell, Python, or Bash for task automation and large-scale data querying
Comprehensive knowledge of Windows, macOS, and Linux internals, including system processes, registry/configuration files, and logging mechanisms
Understanding of TCP/IP, DNS, and proxy configurations as they relate to agent-to-console communication
Technical familiarity with AWS, Azure, or GCP security services
Experience with Splunk, Tines, Palo Alto XSOAR, or Zscaler
Familiarity with digital forensics and proactive threat hunting methodologies and tools
Relevant professional certifications such as GCFA, GCIA, or platform-specific administrator certifications
Ability to diagnose complex technical issues within the security stack and endpoint OS
Occasional after-hours availability for urgent incident containment and system restoration

Benefits

Comp & perks

Incentive compensation eligibility
Equity eligibility
Medical insurance
Dental insurance
Vision insurance
Life insurance
401(k)
Diversity, inclusion, and affirmative action workplace commitment
Accommodation or special assistance during the application process