Senior Detection Engineer (EDR), Defensive Agent

Horizon3.ai
United States
Workplace: RemoteFull timeUSD 195,000 - 230,000 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 6+ yearsSkills: ["Collaboration","Ownership","Technical writing","Influence without authority","Cross-functional communication"]

Own the domain truth behind EDR detection and tuning for the Defensive Agent team, serving as the blue-team voice between Product and Engineering. Define what “correct” detection and remediation mean, set acceptance criteria, and validate releases against real SOC effectiveness metrics. Maintain deep knowledge across major EDR platforms (console/policy/telemetry/API), track vendor changes, and ensure technique coverage stays grounded in current adversary tradecraft.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Horizon3.ai
Horizon3.ai
2 days ago

Senior Detection Engineer (EDR), Defensive Agent

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Own the domain truth behind EDR detection and tuning for the Defensive Agent team, serving as the blue-team voice between Product and Engineering. Define what “correct” detection and remediation mean, set acceptance criteria, and validate releases against real SOC effectiveness metrics. Maintain deep knowledge across major EDR platforms (console/policy/telemetry/API), track vendor changes, and ensure technique coverage stays grounded in current adversary tradecraft.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Partner with Product to turn EDR effectiveness and tuning goals into concrete, buildable requirements.
  • •Define acceptance criteria for detection, effectiveness, and tuning, and validate releases before customers see them.
  • •Serve as the standing domain reference for Engineering and AI research, including design reviews and technique/vendor behavior questions.
  • •Own deep, current knowledge of major EDR and endpoint platforms across console, policy, telemetry, and API layers, including default vs hardened configurations.
  • •Track platform changes and vendor guidance, keep coverage current, and grade agent tuning recommendations against a defined standard.

Pay and Benefits

Salary: USD 195,000 - 230,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionEquityParental Leave

Key Requirements

  • •6+ years in detection engineering, security operations, incident response, or threat hunting with hands-on practitioner experience.
  • •Hands-on experience administering and tuning EDR platforms in production, including writing detections, managing policy/exclusions, and investigating real alerts.
  • •Strong understanding of SOC workflows using EDR output and fluency in false positive/false negative tradeoffs and alert fatigue.
  • •Working knowledge of MITRE ATT&CK and detection coverage frameworks, including where they help or mislead.
  • •Comfort translating between engineers, AI researchers, product managers, SOC analysts, and executives, with exceptional technical writing skills.
Experience:6+ years
Skills:CollaborationOwnershipTechnical writingInfluence without authorityCross-functional communication
Tech Stack:EDREndpoint telemetryAPIsPythonSQLMITRE ATT&CK

Company Brief

Horizon3.ai
Builds NodeZero®, an autonomous penetration-testing platform that continuously finds, prioritizes, and verifies exploitable vulnerabilities across on-premises, cloud, and hybrid environments to help organizations reduce security risk.
Industry: Cybersecurity
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Funding: Series D
Headquarters: San Francisco, United States
Founded: 2019
Glassdoor
Glassdoor: 4.9
WebsiteLinkedInGlassdoor