Endpoint Detection and Response Engineer III

What you'll do

• Engineer, configure, and operate endpoint protection platforms and controls in alignment with established standards.
• Implement preventative and hardening controls that reduce endpoint risk while maintaining business usability.
• Develop and maintain automation, scripts, and tooling to improve consistency and operational efficiency.
• Troubleshoot complex endpoint protection issues and provide advanced technical support for escalated cases.
• Collaborate with Detection Engineering to ensure endpoint telemetry supports high-quality detection use cases.
• Maintain technical documentation, runbooks, and standard operating procedures for endpoint protection controls.
• Analyze sophisticated issues to identify root causes and implement corrective actions to prevent recurrence.

What we're looking for

• 5+ years of experience in cybersecurity with a strong focus on endpoint protection engineering or operations.
• Hands-on experience with enterprise endpoint protection or EDR/XDR platforms.
• Strong knowledge of Windows, macOS, and/or Linux endpoint operating systems.
• Experience implementing and operating security controls at enterprise scale.
• Proficiency in scripting or automation using tools such as PowerShell or Python.
• Solid understanding of cybersecurity frameworks and models such as NIST, CIS Controls, and MITRE ATT&CK.
• Experience and ability to participate in a 24x7x365 team.
• Experience handling third-party vendors and service providers.