Note: The job is a remote job and is open to candidates in USA. Russell Tobin is seeking an experienced Endpoint Detection & Threat Hunting Analyst to support a large enterprise cybersecurity environment. This role is responsible for endpoint security operations, threat hunting, incident response, EDR/XDR administration, and security automation.

Responsibilities

• Administer and optimize CrowdStrike Falcon security products
• Perform proactive threat hunting and incident response investigations
• Manage endpoint security policies, IOA exclusions, device control, and firewall configurations
• Develop and maintain security automation workflows
• Integrate telemetry and security tools through APIs
• Analyze malware, threat intelligence, and security events
• Collaborate with security teams to improve detection and response capabilities
• Generate reports and operational metrics using security platforms and APIs

Skills

• 5+ years of experience in endpoint security, threat hunting, or incident response
• Hands-on experience with CrowdStrike Falcon administration
• Experience with EDR/XDR platforms and endpoint protection technologies
• Experience conducting incident response investigations in enterprise environments
• Experience with PowerShell, Python, or Bash scripting
• Knowledge of API integrations and security automation
• Strong understanding of malware analysis and threat intelligence
• Experience with Secureworks XDR
• Experience with Elastic SIEM
• Experience with Axonius
• Experience with Fusion SOAR
• Experience integrating security telemetry into SIEM and XDR platforms
• Experience with cloud and SaaS environments

Benefits

• W2 option

Company Overview

Company H1B Sponsorship