MEDR Threat Engineer US work hours

14 hours, 5 minutes ago
Full-time
Mid Level
DevOps and Infrastructure
Proficio

Proficio

Proficio specializes in providing managed detection and response services, utilizing advanced technology and 24/7 security monitoring to protect medium to large organizations from cyber threats while ensuring compliance and bridging security gaps.

Professional Services
51-250
Founded 2010
$13M raised

Description

  • Serve as a subject matter expert for enterprise EDR/XDR and endpoint security across Windows, macOS, and Linux.
  • Design, configure, maintain, and tune EDR/XDR policies, prevention controls, detections, exclusions, and application controls.
  • Manage EDR deployments, agent upgrades, endpoint health, policy assignments, and troubleshooting across customer environments.
  • Develop custom detections, behavioral rules, IOCs, blocklists, and automated response use cases.
  • Conduct threat hunting and advanced investigations involving malware, ransomware, phishing, scripts, lateral movement, persistence, and privilege escalation.
  • Integrate EDR/XDR platforms with SIEM, SOAR, ITSM, identity, email security, and threat intelligence systems.
  • Collaborate with SOC and MDR teams to improve detection coverage, alert quality, investigations, and incident response.
  • Translate customer security requirements into endpoint policies, detections, automations, and controls.
  • Analyze email security events and related endpoint activity.
  • Prepare incident escalations, technical documentation, assessments, operational reports, and customer-facing security reports.

Requirements

  • 3+ years of hands-on experience deploying, configuring, administering, troubleshooting, and managing enterprise EDR solutions.
  • Experience with at least two platforms such as CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint, Carbon Black, Cortex XDR, Cisco XDR, or Trend Micro.
  • Experience with at least one XDR platform and correlating telemetry from multiple sources.
  • Strong experience configuring and tuning EDR/XDR policies, exclusions, prevention controls, and endpoint management.
  • Experience developing custom detections, indicators, blocklists, and automated response actions.
  • Experience integrating security platforms through APIs, connectors, or similar methods.
  • Experience troubleshooting endpoint agents, deployment issues, policy conflicts, connectivity problems, and security configurations.
  • Knowledge of Windows, macOS, Linux, network security concepts, protocols, and common security controls.
  • Ability to analyze and correlate endpoint, network, identity, email, and other security telemetry.
  • SOC, MDR, MSSP, or customer-facing security experience is highly desirable.
  • Experience with security automation, threat intelligence tools, PowerShell or Python scripting, Microsoft security technologies, dashboards, reporting, vulnerability management, compliance, or security frameworks is preferred.

Benefits

  • Structured training and a roadmap for professional success.
  • Meal, gym, internet, and other reimbursement programs.
  • Opportunity to work in the cybersecurity industry.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

DevSecOps and Security Compliance Engineer

K.L. Scott & Associates 11-50 Professional Services

K.L. Scott & Associates, LLC is hiring a DevSecOps and Security Compliance Engineer to integrate security into SAP delivery and operations for federal clients while improving deployment controls, addressing vulnerabilities, and maintaining authorization evidence.

CI/CD DevSecOps SAP Secrets Management
14 hours, 5 minutes ago

Senior Defensive Content Engineer

Hack The Box 51-250 Internet Software & Services

Hack The Box is seeking a Senior Defensive Content Engineer to create and validate cyber ranges, threat-hunting labs, and defensive learning experiences that strengthen enterprise cybersecurity capabilities.

Ansible Linux SIEM Terraform Wireshark
14 hours, 5 minutes ago

Senior Security Engineer, Customer Transparency

Tanium 1K-5K Internet Software & Services

Tanium is hiring a Senior Security Engineer for its Customer Transparency team to improve visibility into Tanium’s security posture, manage vulnerability disclosure, and address customer security needs.

CI/CD Encryption Git
1 day, 13 hours ago

Vulnerability Management Team Lead

Centorrino Technologies 51-250 Internet Software & Services

Centorrino Technologies is seeking a Vulnerability Management Team Lead to lead vulnerability remediation and risk reduction for enterprise and customer environments within its Australian Systems Operations Centre.

1 day, 14 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers