Senior Detection Engineer (EDR), Defensive Agent
Core
Define ground truth for EDR detection logic, validate agent output, and translate blue team workflows into buildable product requirements.
Role type
Senior domain expert / IC (Defensive Agent)
Builds
Production EDR detection features and tuning recommendations
Domain
Cybersecurity / Endpoint Detection and Response (EDR)
Deliverable
product features
Required skills
EDR platform administration, threat hunting, MITRE ATT&CK frameworks, incident response, technical writing, SQL, Python scripting
Preferred skills
SOC operations experience, adversary tradecraft knowledge, API telemetry analysis
Responsibilities
Define acceptance criteria for detection features, validate releases against domain standards, maintain fluency in EDR vendor policies, partner with Attack team on technique coverage, influence product roadmap without authority
Seniority
Senior, hands-on IC