Summary

The principal EDR and XDR engineer leads endpoint security engineering and detection using Microsoft Defender XDR, CrowdStrike Falcon, and Microsoft Sentinel. This is a hybrid role focused on improving threat detection and response across the organisation.

Responsibilities

• Lead EDR and XDR platform lifecycle
• Develop and tune high-fidelity detections
• Hunt threats and support complex investigations
• Evaluate integrations and security monitoring architecture
• Establish detection-as-code and CI/CD practices
• Mentor engineers and document platform standards