Remote EDR Engineer Jobs USA 2026 | Recorded Future NEW

Build reliable endpoint defenses at threat intelligence company Recorded Future in a U.S. remote role with a published $78,500–$117,500 annual base salary range.

Quick Info: Job at a Glance

Remote EDR Engineer Jobs USA 2026: Recorded Future

This Recorded Future opening combines endpoint security engineering with incident response. The engineer helps keep endpoint data dependable and detection rules useful, so responders can act on credible signals. For candidates researching remote EDR engineer jobs USA 2026, the main distinction is hands-on ownership of security platforms rather than alert review alone.

The Role

• Maintain EDR deployments and agent health across CrowdStrike, SentinelOne and Microsoft Defender for Endpoint.
• Improve detection policies using threat intelligence and reduce unnecessary alerts.
• Protect cloud workloads across AWS, Azure or GCP, including virtual machines and containers.
• Connect endpoint platforms with SIEM/SOAR tooling; support Audit and DLP technologies.
• Support containment, live response, remote evidence collection and restoration; document changes, SOPs and configuration baselines.

Required Qualifications & Competencies

The employer asks for three or more years of enterprise EDR administration, with PowerShell, Python or Bash scripting. Candidates should understand Windows, macOS and Linux internals, processes, registry/configuration files and logging; TCP/IP, DNS and proxies; and cloud security services including GuardDuty and Microsoft Defender for Cloud.

Other named technologies include Splunk, Tines, Palo Alto XSOAR and Zscaler. Digital forensics, proactive threat hunting, complex troubleshooting and relevant GCFA, GCIA or platform administrator certifications are also listed. No specific academic degree is specified. Clear documentation and coordination with incident responders are practical parts of the work.

Pay, Benefits & Workplace Culture

The $78,500–$117,500 U.S. base range varies by location and candidate background. Incentive compensation, equity, medical, dental, vision, life insurance and 401(k) may be available; confirm the package with the recruiter. Leave allowances and fixed working hours are not specified. The employer describes an inclusive workplace centered on ethical conduct and high standards.

Editor’s Take: Why This Role Could Be a Strategic Move

Aptub editorial analysis: This position could suit an administrator ready to demonstrate how platform maintenance improves incident response. Ownership of agent health, policy changes and response integrations can provide useful evidence for future detection engineering or security operations leadership applications. Progression depends on your responsibilities and results; the listing does not promise a promotion path.

Compare the offer with your current total compensation, not just the top of the range. Before accepting, ask which level the team is considering, how compensation changes by state, whether incentive pay is discretionary, and how after-hours coverage is organized. Remote work here still carries a defined U.S. location restriction.

Practical Resume & Interview Preparation

• Write one concise case study showing an endpoint fleet problem, your diagnosis, the approved change and a measurable result. Remove client names and confidential details.
• Prepare an automation example that explains error handling, logging and rollback. Be ready to discuss why you chose PowerShell, Python or Bash.
• Practice explaining how you would investigate an unhealthy agent: connectivity, proxy behavior, service state, logs and console visibility.
• Discuss how you would test a detection change before broad deployment and what evidence would justify tuning an alert.

How to Apply & Recruitment Safety

Apply on Recorded Future’s official Greenhouse job page. Prepare your resume, LinkedIn URL, enterprise EDR experience summary and platform/scripting details. The form asks about U.S. work authorization and sponsorship; the listing does not promise sponsorship.

Recorded Future says final interviews involve a scheduled live video meeting or an in-person meeting, and it does not interview through text or instant messaging. Verify recruiter communications against its official company email domain.

Employer listing checked October 8, 2026. Aptub independently summarizes the vacancy and adds candidate guidance; it is not the hiring employer. The header uses a generic cybersecurity illustration.

Frequently Asked Questions

Is this Recorded Future job remote worldwide?

No. This opening is listed as Remote – USA. Applicants should confirm eligible states and work authorization requirements with the recruiter; worldwide hiring is not advertised.

What is the EDR Engineer salary?

The published U.S. annual base salary range is $78,500–$117,500. Actual pay depends on location, level, skills and experience. Additional compensation and benefits may apply.

What experience and credentials are required?

The listing asks for at least three years managing enterprise EDR, scripting and security troubleshooting skills, and relevant certifications such as GCFA, GCIA or platform administrator credentials. No specific degree is stated.

What is the application deadline?

Recorded Future does not state a closing date on the employer listing. Apply through its official Greenhouse application while the vacancy remains available.

Does the role require after-hours work?

Yes. Occasional after-hours availability is required for urgent incident containment and system restoration. Ask the recruiter about the on-call schedule and coverage expectations.

Explore more remote cybersecurity jobs on Aptub.