Edr And Xdr

Edr And Xdr Engineer Jobs

2 jobs found

Today

Security Engineer

Neptune Technology Group Inc. Duluth, GA

Duluth, GA

Today

Full time Cloud Platforms Data Loss Prevention Edr And Xdr

Apply Now

Job Description

The Security Engineer will operate within Neptune Technology Group Inc.’s Security Operations Center (SOC), where the role designs, implements, administers, and optimizes cybersecurity technologies. This position also provides technical leadership for incident detection, investigation, response, and remediation while driving continuous improvements through engineering and process enhancements.

Onsite Location

Duluth, GA (onsite)
Duluth, GA, Tallassee, AL

Role Responsibilities

Design, configure, implement, and maintain security platforms including SIEM, EDR/XDR, SOAR, Identity and Access Management (IAM), Data Loss Prevention (DLP), Vulnerability Management, and Cloud Security solutions
Evaluate, test, and deploy new security technologies, including Proof of Concept (POC) evaluations
Develop automation and orchestration workflows to improve operational efficiency
Support cloud security and Zero Trust initiatives across the enterprise
Develop and tune security detections, correlation rules, and dashboards to improve threat detection while reducing false positives
Conduct proactive threat hunting and analyze security telemetry across endpoints, network, identity, cloud, and SIEM platforms
Identify opportunities to strengthen detection and response capabilities across the environment
Monitor emerging threats, vulnerabilities, and industry best practices to inform detection strategy
Provide technical leadership during complex and escalated incident activities, including investigation, containment, eradication, and recovery
Investigate advanced cyber threats and complex security alerts
Collect and analyze forensic artifacts, logs, and endpoint telemetry during investigations
Participate in an on-call rotation and provide advanced technical support during critical incidents
Support root cause analysis and post-incident reviews
Validate vulnerability findings and coordinate remediation activities with IT Operations, Infrastructure, and Engineering teams
Implement security controls to address identified risks and track remediation efforts within the vulnerability management program
Partner with SOC Analysts, IT Operations, Infrastructure, Cloud, and Engineering teams to implement and maintain security solutions
Develop response playbooks, engineering standards, and operational procedures
Mentor SOC Analysts through technical guidance and support
Create and maintain technical documentation supporting SOC operations
Collaborate with Neptune’s MSSP and third-party security partners on engineering and investigation initiatives
Support compliance initiatives aligned with NIST CSF, CIS Controls, ISO 27001, and Roper Cybersecurity requirements
Recommend improvements to strengthen Neptune’s security posture, resilience, and compliance
Assist with audit requests, evidence collection, and security documentation

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
2–5 years of experience in cybersecurity, security operations, incident response, or a related technical field
Experience investigating security alerts, detections, and cybersecurity incidents
Experience working in a Security Operations Center (SOC) environment
Experience with SIEM and EDR platforms
Understanding of security engineering concepts, including detection engineering, automation, and security tool administration
Strong analytical, troubleshooting, and problem-solving skills
Strong written and verbal communication skills

Relevant Technologies

SIEM
EDR/XDR
SOAR
Identity and Access Management (IAM)
Data Loss Prevention (DLP)
Vulnerability Management
Cloud Security solutions
CrowdStrike Falcon
Google SecOps (Chronicle)
Microsoft Defender
Microsoft Entra ID (IAM)
Cloud Security Platforms (AWS, Azure)
MITRE ATT&CK Framework
PowerShell
Python
NIST CSF
CIS Controls
ISO 27001
Roper Cybersecurity requirements

Expected Platform Experience

CrowdStrike Falcon
Google SecOps (Chronicle)
Microsoft Defender
SIEM Platforms
Endpoint Detection and Response (EDR) Platforms
Security Orchestration, Automation, and Response (SOAR)
Identity and Access Management (IAM) / Microsoft Entra ID
Data Loss Prevention (DLP)
Cloud Security Platforms (AWS, Azure)
Vulnerability Management Platforms

Preferred Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related field
2–5 years of experience in Security Operations, Cybersecurity, Incident Response, Vulnerability Management, or Information Technology
Experience with SIEM platforms such as Google SecOps, Chronicle, Splunk, QRadar, Microsoft Sentinel, or similar technologies
Experience with EDR platforms such as CrowdStrike Falcon or Microsoft Defender
Familiarity with the MITRE ATT&CK Framework, threat hunting, and threat intelligence methodologies
Experience supporting vulnerability management programs and remediation activities
Knowledge of Windows, Active Directory, Microsoft Entra ID, networking fundamentals, and cloud security concepts
Experience working with AWS and/or Azure environments
Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO 27001, and security best practices
Experience with scripting or automation using PowerShell, Python, or similar languages

Certifications (Preferred)

Security+
CySA+
GSEC
GCIH
GCIA
GCED
CISSP (Associate or Full)
SC-200
SC-100
CrowdStrike Certifications
Google SecOps Certifications
AWS or Azure Security Certifications

Education

Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field preferred
Equivalent military, technical, or professional experience will be considered

Travel Requirements

Typically requires overnight travel less than 10% of the time

Experience Level

Minimum experience: 2 years
Years of experience (IT, Security & Compliance): 2–5 years

View full job page →

4d ago

Cyber Security Engineer

Concertium Tampa, FL

Tampa, FL

4d ago

$75k - $85k/yr Full time Cybersecurity Tools Data Security Edr And Xdr

Apply Now

Job Description

CONEERTIUM is hiring a Cyber Security Engineer to safeguard Concertium and client assets through ongoing security control planning, monitoring, and improvement. This role also includes troubleshooting security issues and responding to breaches within a 24/7 operational environment.

Location and Work Setup

Location: Tampa, FL 33607 (hybrid)
Job type: Full-time
Expected hours: 40 hours/week
Travel: Little to no travel expected

Compensation

Salary range: USD 75,000 to 85,000 per year

Responsibilities

Plan, implement, manage, monitor, and upgrade security measures to protect Concertium’s data, systems, and environment.
Troubleshoot solutions for security challenges.
Respond to system and/or security breaches.
Recommend and enable appropriate security controls to protect Concertium and clients’ data and infrastructure.
Participate in change and configuration management processes.
Test and identify vulnerabilities across networks and systems.
Complete daily administrative tasks, including reporting and communication with relevant departments.
Research security weaknesses and develop countermeasures.
Develop security best practices and cyber security standards for Concertium and clients.
Use SIEM/SOAR/XDR/EDR and related tools (including ConnectWise, Security Onion, Sentinel One, Microsoft Sentinel, SureShield, CrowdStrike, DUO, among others) to monitor alerts and security events for client networks and systems.
Apply knowledge of the cyber-threat landscape and the MITRE ATT&CK framework.
Continuously improve cyber security expertise.
Support shift work in a 24x7 environment.
Perform other related duties as assigned.

Requirements

Must be a US Citizen and located in the Tampa Bay area.
Excellent communication and presentation skills, with the ability to build relationships.
Experience analyzing and administering Cloud/SaaS/Networking and network security solutions, including:
- Managed Detection and Response
- Next Gen Firewalls
- IDS/IPS
- SIEM solutions and SOAR
- Cloud Security and End Point Security
- Vulnerability and Penetration Testing services
Education: Bachelor’s degree in computer science, IT, systems engineering, or a related qualification.
Experience: 2 years of work experience with incident detection, incident response, and forensics.
Experience with cloud solutions (Microsoft Azure preferred), networking, firewalls, monitoring and countermeasures, Office 365 Security, VMware, SIEM, vulnerability management solutions, ticketing systems, and endpoint security.
Proficiency in one or more programming/scripting languages: Python, C++, Java, Ruby, Node, Go, and/or Power Shell.
1+ years’ experience performing cyber security assessments.
Ability to prioritize projects and triage cyber security events and/or incidents.
Ability to work under pressure in a demanding environment.
Strong attention to detail with analytical and critical thinking skills.
Strong awareness of cybersecurity trends and hacking techniques.
Understanding of enterprise best practices and implementation.
Knowledge of compliance process and regulatory requirements such as HIPAA, PCI, and NIST-800 is preferred (not required).
Certifications such as CISSP, GSEC, CDPSE, or CISM are desired.

Technology Stack

Firewalls, VPN, Data Loss Prevention, IDS/IPS
Web and Email Proxies
SIEMs, EDR, XDRs
MITRE ATT&CK
SIEM/SOAR/XDR/EDR tooling and platforms such as ConnectWise, Security Onion, Sentinel One, Microsoft Sentinel, SureShield, CrowdStrike, and DUO
Microsoft Azure, Office 365 Security, VMware
Vulnerability and Penetration Testing Services; Vulnerability Management Solutions
Ticketing systems
Python, C++, Java, Ruby, Node, Go, Power Shell
HIPAA, PCI, NIST-800, CISSP, GSEC, CDPSE, CISM

Benefits

401(k) and 401(k) matching
Dental insurance
Flexible schedule
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Referral program
Tuition reimbursement
Vision insurance

Additional Offerings

Company-paid Medical in addition to Dental/Vision options
Flexibility to work from office, home, or both
High-powered laptop
Frequent company and social outings
Generous Vacation/Personal/Holiday/Sick Time Off including floating birthday day
Short- and Long-Term Disability
Basic Life & Accidental Death Insurance
Employee referral bonuses
Health Care/Dependent Care Flexible Spending Accounts
Tuition reimbursement
Team environment with direct support

Physical Requirements

Ability to communicate information and ideas so others will understand.
Ability to exchange accurate information in the required situations.
Ability to observe details at close range.
Ability to remain stationary most of the time.
Ability to talk and listen for prolonged periods of time.
Occasionally required to lift, push, or carry items less than 25 pounds.

Other Duties

Please note that this job description is not designed to cover or contain a comprehensive list of activities, duties, or responsibilities that are required of the employee for this position. Duties, responsibilities, and activities may change at any time with or without notice.

View full job page →

Edr And Xdr Engineer Jobs

Security Engineer

Cyber Security Engineer

Get Edr And Xdr Engineer Jobs alerts