Operations engineer Jobs in USA

Job Description:

• Administer CyberMaxx-managed EDR platforms across customer environments
• Perform configuration, policy maintenance and tuning, agent lifecycle activities, operational controls, and platform health checks
• Execute approved platform changes, including agent upgrades, bulk actions, policy transitions, and recovery activities, using change controls and validation procedures
• Monitor platform health, agent coverage, version status, policy alignment, and operational exceptions; investigate discrepancies and coordinate remediation
• Support agent deployment, console configuration, integrations, and platform migrations
• Monitor vendor roadmaps and emerging capabilities and contribute recommendations to internal standards
• Investigate endpoint security issues involving agent connectivity, performance, interoperability, policies, detections, exclusions, upgrades, and deployment failures
• Collect and analyze endpoint, console, and application evidence to isolate causes
• Resolve requests within defined procedures and escalate complex, high-risk, or vendor-dependent issues
• Work with vendors and internal teams on support cases and remediation validation
• Participate in peer review of configuration changes, exclusions, and technical recommendations
• Use PowerShell, Python, vendor APIs, or approved automation tools for repeatable tasks and evidence collection
• Contribute to scripts, workflows, platform integrations, testing, documentation, and controlled rollouts
• Identify recurring requests and manual processes for standardization or automation
• Develop and maintain operational dashboards, reports, and health metrics
• Maintain engineering repositories, runbooks, operational checklists, and tooling documentation
• Coordinate operational requests and technical investigations from intake through completion
• Provide recommendations on EDR configuration, deployment, platform health, and endpoint security operations
• Support customer meetings, training, and routine EDR administration guidance
• Develop customer-facing procedures, configuration guidance, and implementation documentation
• Share troubleshooting findings and reusable procedures with Operations Engineering and SOC teams
• Collaborate with SOC, Detection Engineering, Professional Services, Customer Success, and other operational teams

Requirements:

• 4+ years of experience in endpoint security, EDR operations, security engineering, systems administration, SOC operations, or a closely related technical role
• Hands-on experience administering or supporting at least one of: CrowdStrike Falcon, SentinelOne Singularity, or Microsoft Defender for Endpoint
• Practical experience troubleshooting Windows endpoints
• Familiarity with macOS or Linux endpoint administration is beneficial
• Working knowledge of EDR concepts, endpoint security policies, agent deployment, exclusions, detection triage, and basic response actions
• Ability to use PowerShell, Python, command-line tools, or vendor APIs for troubleshooting and repeatable operational tasks
• Ability to analyze technical evidence, document findings, follow change controls, and escalate issues with sufficient context
• Clear written and verbal communication skills for working with internal engineering teams and customer stakeholders
• Experience working in an MSSP, MDR, SOC, or other multi-customer security operations environment is preferred
• Familiarity with Linux systems, the ITIL framework, and availability monitoring is preferred
• Experience using agentic or AI-assisted tooling to automate routine, recurring tasks is preferred
• Relevant vendor certification or training, such as CrowdStrike CCFA, SentinelOne Certified Administrator or Engineer, Microsoft SC-200, or equivalent practical coursework is preferred
• Experience with SOAR platforms, SIEM integrations, or security automation tooling in endpoint security operations is preferred
• Understanding of MITRE ATT&CK, common endpoint attack techniques, and EDR telemetry is preferred
• Experience using EDR-native remote response, query, hunting, bulk-management, or detection validation capabilities is preferred

Benefits:

• Flexible Paid Time Off
• 401k with a company match
• Medical, Dental and Vision Coverage
• Voluntary Short Term and Long-Term Disability
• Employee Assistance Program with Mental Health Supplement
• Voluntary Basic, Accidental, and other ancillary life insurance
• Health Savings Account Contribution (with selection of a HDHP)
• 10 annual, paid holidays
• Structured cross-training to build working proficiency across the supported portfolio