Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Senior Endpoint Security Engineer

Barracuda Networks Inc.123 open roles

Pay
$110,000 – $130,000 a year
Where
Chelmsford, MA, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Endpoint Security EngineerBarracuda Networks Inc. · Chelmsford, MA, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Barracuda Networks Inc.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 2 days ago

The posting

Location: Remote, USA

Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.

We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.

Envision Yourself at Barracuda:

We are seeking a Senior Endpoint Security & IR Engineer to join our incident response team. You will lead management of our SentinelOne XDR platform, complex investigations across multiple client environments, drive rapid containment of active threats, and serve as a trusted advisor to clients during their most critical security events. This role combines deep technical expertise with client-facing communication skills in a fast-paced, multi-tenant MSSP environment.

You will work closely with our Cyber Concierge, Threat Analysts and Automation teams to continuously improve our response capabilities and protect our clients from sophisticated adversaries.

What You’ll be Working On:

  • Expert knowledge and experience in SentinelOne – Key Requirement
  • Lead end-to-end incident response engagements across diverse client environments, from initial triage through remediation and lessons learned
  • Perform host-based forensics using Binalyze AIR for remote evidence acquisition, triage, and analysis at scale
  • Design custom detection rules within SentinelOne and fine tune protection policies.
  • Proven experience in windows, mac and linux environments
  • Investigate alerts and threats detected by SentinelOne, including Deep Visibility hunting, threat timeline reconstruction, and MITRE ATT&CK mapping
  • Analyze Microsoft 365 security incidents including business email compromise, OAuth abuse, mailbox rule manipulation, and Azure AD/Entra ID attacks
  • Conduct log analysis and threat hunting in Elastic to identify indicators of compromise, lateral movement, and data exfiltration
  • Leverage Databricks for large-scale log analytics, anomaly detection, and threat hunting across aggregated client telemetry
  • Document findings in clear, executive-ready incident reports tailored to both technical and non-technical stakeholders
  • Participate in a 24/7 on-call rotation

Automation & Detection Engineering

  • Develop and maintain Python scripts for evidence collection, log parsing, IOC enrichment, and automated response actions
  • Build and optimize automated response workflows in Tines to accelerate containment and MTTR
  • Create and tune detection rules in Elastic and SentinelOne based on investigative findings and emerging threat intelligence
  • Integrate tooling across the security stack to streamline IR workflows and reduce manual effort.

Client Engagement & Service Delivery

  • Serve as the primary IR point of contact for client stakeholders during active incidents
  • Conduct client-facing incident briefings, root cause analysis presentations, and post-incident reviews
  • Deliver actionable remediation guidance tailored to each client's environment and risk tolerance
  • Maintain SLA commitments for incident acknowledgment, updates, and resolution
  • Contribute to client security posture assessments and IR readiness recommendations.

What you Bring to the Role:

  • Minimum of bachelor’s degree in computer science and 5+ years of hands-on experience in incident response, digital forensics, or security operations
  • MSSP, MDR, or consulting experience is strongly preferred. Demonstrated ability to manage multiple client engagements simultaneously.
  • Proven track record investigating real-world incidents including ransomware, BEC Attacks, lateral movement, data exfiltration etc.
  • Experience working in multi-tenant environments with diverse security maturity levels.
  • GIAC certification required; one or more of the following:
  • GCIH (GIAC Certified Incident Handler)
  • GCFA (GIAC Certified Forensic Analyst)
  • GCFE (GIAC Certified Forensic Examiner)
  • GNFA (GIAC Network Forensic Analyst)
  • Equivalent certifications considered: OSCP, eCIR, eCDFP, EnCE, SC-200, AZ-500

Required Technical Skills in Core Platforms

  • DFIR - Binalyze AIR - remote acquisition, triage, timeline analysis and artifact collection.
  • EDR - SentinelOne threat investigations, Deep Visibility, detection engineering, policy configuration
  • Microsoft 365 / Defender - BEC investigation, UAL analysis, Safe Links/Attachments, Entra ID etc.
  • Analytics - Databricks - large-scale log analysis, SQL/Python notebooks, threat hunting at scale
  • Automation - workflow automation, playbook development, API integrations and continuous monitoring.

Preferred Qualifications

  • Experience with additional EDR platforms (CrowdStrike, Microsoft Defender for Endpoint)
  • Advanced knowledge of macOS and Linux forensics
  • Familiarity with threat intelligence platforms (MISP, Recorded Future, Virus Total Enterprise)
  • Experience with Velociraptor, KAPE, or Volatility for advanced forensic collection and investigations.
  • Prior experience in IR teams or serving as an IR practice SME

What You’ll Get from Us:

A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility – there are opportunities for cross training and the ability to attain your next career step within Barracuda.

  • Equity, in the form of non-qualifying options
  • High-quality health benefits
  • Retirement Plan with employer match
  • Career-growth opportunities
  • Flexible Time Off and Paid Time Off benefits
  • Volunteer opportunities

The anticipated salary range for this role is $110,000 to $130,000. Actual compensation offered will be dependent upon the individual's skills, experience, and qualifications as they directly relate to the requirements of the position, the budget for the position, and applicable employment laws.

At Barracuda, we believe in fair and equitable compensation practices that reflect both market realities and the unique circumstances of each geographical location. We recognize that cost-of-living disparities, market conditions, and other factors can significantly impact compensation expectations in different regions. The compensation range provided in this job description is for illustrative purposes only and may not reflect the actual compensation offers for the position in your location. Final compensation will be determined based on a variety of factors including the candidates’ qualifications and experience.

Job ID: 27- 2704

#LI-remote

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Barracuda Networks Inc.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Barracuda Networks Inc.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Barracuda Networks Inc.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.