Overview
We are seeking a skilled Cyber Security Engineer specializing in Endpoint Detection & Response (EDR) technologies for a remote position. In this technical role, the candidate will focus on configuring and optimizing EDR platforms while engaging with security tooling evaluations and proof of concept activities. The successful candidate will collaborate with teams across multiple domains to enhance endpoint security in a large enterprise environment.
Responsibilities
- Configure, administer and optimise enterprise EDR platforms.
- Deploy and onboard endpoints across large enterprise environments.
- Develop and tune detection policies, prevention rules, exclusions and response workflows.
- Investigate endpoint security events and provide technical remediation guidance.
- Lead and support Proof of Concept (POC) engagements for endpoint security technologies.
- Assess EDR platforms based on detection capability, operational effectiveness and performance.
- Integrate EDR tooling with SIEM and wider security platforms where required.
- Produce technical documentation, implementation guides and engineering standards.
Requirements
- Strong hands-on engineering experience with enterprise Endpoint Detection & Response (EDR) platforms.
- Commercial experience configuring and administering Microsoft Defender for Endpoint, CrowdStrike Falcon, or Trend Micro Vision One/Apex One.
- Experience configuring security policies, onboarding endpoints, exclusions, and attack surface reduction rules.
- Strong understanding of endpoint security, malware protection, incident response, and threat detection.
- Experience investigating endpoint alerts and supporting security incidents.
- Comfortable working in complex enterprise Windows environments.
- Experience integrating EDR platforms with Microsoft Sentinel, Splunk or other SIEM solutions is a plus.
- Knowledge of MITRE ATT&CK and experience with large enterprise endpoint estates (5,000+ devices) is desirable.