Security Engineer

This is a fully remote position, open to applicants in Utah.

📋 Description

• Take charge of endpoint detection and response for managed security clients.

• Implement, optimize, and manage CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black, and SentinelOne.

• Oversee SIEM pipelines and ensure consistent telemetry health.

• Work in collaboration with Security Engineers and SOC Analysts to identify tools, techniques, and procedures.

• Convert customer requirements and future objectives into secure and effective solution strategies.

• Research new methodologies and assist customers in surpassing industry benchmarks.

• Develop solutions, pinpoint vulnerabilities, provide alternatives, and balance security with business priorities.

• Manage multi-tenant EDR consoles, including RBAC, policy inheritance, and sensor update methodologies.

• Adjust prevention and detection configurations.

• Monitor sensor performance and coverage.

• Administer EDR-to-SIEM pipelines into Sumo Logic Cloud SIEM, Microsoft Sentinel, and Stellar Cyber.

• Create and maintain API integrations between EDR platforms, SOAR, ticketing systems, and threat intelligence.

• Plan and execute EDR deployments and migrations utilizing Intune, SCCM, GPO, or Jamf.

⛳️ Requirements

• Minimum of 2 years of experience in deploying or managing an enterprise EDR in a production environment, alongside 2+ years of systems administration.

• At least one complete EDR deployment or migration experience, covering rollout, policy, exclusions, and transition to operations.

• Proficiency in Windows internals and macOS/Linux administration.

• Experience in troubleshooting service interruptions, system extensions, eBPF, AV conflicts, proxies, and TLS inspection.

• Hands-on experience with SIEM, including log-source onboarding, event parsing, field extractions, and query formulation.

• Knowledge of PowerShell plus Python or Go, including scripting for API access and endpoint deployment.

• Familiarity with MITRE ATT&CK and endpoint telemetry.

• Strong writing skills for creating runbooks, incident reports, and configuration documentation.

• Preferred: 4+ years of experience specifically with CrowdStrike Falcon or SentinelOne, or production experience with multiple EDR solutions listed.

• Preferred: Experience in MSSP or multi-tenant operations.

• Preferred: Knowledge in Sysmon deployment and configuration adjustments.

• Preferred: Experience in federal/public-sector security, including NIST SP 800-53, RMF, FedRAMP, and federal authorization and assessment procedures.

🏝️ Benefits

• Opportunities for career advancement based on performance.

• Start-up culture with an office located in downtown Salt Lake City, UT.

• Competitive medical and dental benefits for employees and their families.

• Short-term disability coverage.

• Basic life insurance provided.

• Coverage for children’s orthodontia.

• Additional voluntary benefits available.

• 401K matching program.

• Flexible Paid Time Off policy.

• Professional development opportunities tailored to the role.