1

Edr Engineer Jobs in Raleigh, NC (NOW HIRING)

Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting * Partner with MDR analysts, IR, threat hunters, and engineering teams to translate ...

Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting * Partner with MDR analysts, IR, threat hunters, and engineering teams to translate ...

Jr. Product Engineer Department: 171024 - Product Business Department Reports to: Director of ... Communicate technical issues with Korean vendors and translate EDR's from Korean to English

next page

Showing results 1-20

Edr Engineer information

See Raleigh, NC salary details

$43.3K

$119.8K

$176.4K

How much do edr engineer jobs pay per year?

As of Jul 10, 2026, the average yearly pay for edr engineer in Raleigh, NC is $119,842.00, according to ZipRecruiter salary data. Most workers in this role earn between $98,700.00 and $136,600.00 per year, depending on experience, location, and employer.

What is the difference between Edr Engineer vs Edr Technician?

AspectEdr EngineerEdr Technician
CredentialsBachelor's degree in electrical, electronics, or related engineering fields; certifications like Cisco or CompTIA are commonTechnical diploma or associate degree; relevant certifications may include Cisco or CompTIA
Work EnvironmentDesign, develop, and troubleshoot EDR systems; often involved in project planning and system integrationInstall, maintain, and repair EDR hardware and software; hands-on technical support
Employer & Industry UsageUsed by network security firms, telecom companies, and large enterprises for security and data recoveryEmployed in similar settings for operational support and system maintenance

In summary, Edr Engineers focus on designing and developing EDR systems, requiring higher-level engineering skills and credentials. Edr Technicians handle installation and maintenance, with more hands-on technical tasks. Both roles are essential in the cybersecurity and data recovery industry, but they differ in responsibilities and required qualifications.

What are some common challenges EDR Engineers face when integrating endpoint detection and response solutions across diverse IT environments?

EDR Engineers often encounter challenges when deploying and managing endpoint detection and response solutions in organizations with a mix of legacy systems, various operating systems, and remote or hybrid workforces. Compatibility issues, ensuring consistent policy enforcement, and maintaining real-time visibility across all endpoints can be complex tasks. Collaboration with IT, security teams, and end-users is essential to troubleshoot deployment issues, minimize false positives, and optimize system performance. Staying up-to-date with evolving threats and regularly tuning the EDR solution are also key aspects of the role.

What are EDR Engineers?

EDR Engineers are cybersecurity professionals who specialize in implementing, managing, and optimizing Endpoint Detection and Response (EDR) solutions for organizations. Their main responsibilities include monitoring endpoints for suspicious activities, investigating security incidents, and responding to threats in real-time. EDR Engineers work closely with security teams to ensure robust protection against malware, ransomware, and other cyber threats by leveraging advanced detection and automated response tools. They also contribute to improving security policies and practices based on threat intelligence gathered from endpoints.

What are the key skills and qualifications needed to thrive as an EDR Engineer, and why are they important?

To thrive as an EDR Engineer, you need a solid background in cybersecurity, threat detection, incident response, and typically a degree in computer science or a related field. Familiarity with endpoint detection and response (EDR) tools such as CrowdStrike, SentinelOne, or Carbon Black, along with certifications like CEH or CISSP, is highly valuable. Strong analytical thinking, problem-solving abilities, and effective communication skills help EDR Engineers collaborate across teams and respond swiftly to threats. These skills and qualifications are essential to proactively identify, investigate, and mitigate security incidents, ensuring the organization's digital assets remain protected.
What are popular job titles related to Edr Engineer jobs in Raleigh, NC? For Edr Engineer jobs in Raleigh, NC, the most frequently searched job titles are:
What job categories do people searching Edr Engineer jobs in Raleigh, NC look for? The top searched job categories for Edr Engineer jobs in Raleigh, NC are:
Infographic showing various Edr Engineer job openings in Raleigh, NC as of July 2026, with employment types broken down into 88% Full Time, 7% Part Time, 1% Temporary, and 4% Contract. Highlights an 81% Physical, 6% Hybrid, and 13% Remote job distribution, with an average salary of $119,842 per year, or $57.6 per hour.
MDR Security Engineer

MDR Security Engineer

Varonis

Morrisville, NC • Hybrid

Other

Posted 23 days ago


Varonis rating

7.3

Company rating: 7.3 out of 10

Based on 5 frontline employees who took The Breakroom Quiz

146th of 205 rated software companies


Job description

Job Title: MDR Security Engineer
Location: We are seeking candidates based in the Raleigh, North Carolina area.


Position Overview

Varonis MDR delivers 24x7x365 managed detection and response services, protecting customer data through advanced detection, investigation, and response at scale.

We are seeking an MDR Security Engineer to own and scale the automation layer that powers our global MDR operations. This role is responsible for building and operating production-grade automation systems that reduce manual workload, improve detection quality, and enable consistent, high-quality incident response.

The ideal candidate is a hands-on engineer with strong experience in SOAR platforms, security operations, and automation design, capable of driving measurable improvements in efficiency, reliability, and response outcomes across a high-volume SOC environment.


Responsibilities

  • Upkeep the design, development, and lifecycle of SOAR playbooks, workflows, and integrations across the MDR platform
  • Build and operate production-grade automation systems supporting alert triage, enrichment, investigation, and response
  • Define and drive automation strategy by identifying high-impact, high-volume SOC processes and scaling them through automation
  • Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting
  • Partner with MDR analysts, IR, threat hunters, and engineering teams to translate operational workflows into scalable automation
  • Improve detection and response quality through automation of enrichment, investigation, and containment workflows
  • Contribute to incident response and RCAs by delivering tooling that improves investigation speed, accuracy, and consistency
  • Evaluate and implement new automation capabilities, including AI-assisted workflows and data-driven decisioning

Monitoring, Metrics & Reliability Ownership

  • Define and own automation KPIs, including:
    • Automation coverage (% of alerts handled or augmented)
    • MTTD / MTTR improvement
    • False positive reduction and signal-to-noise improvement
    • Analyst time saved and throughput increase
  • Build and maintain dashboards and reporting to measure automation impact on SOC performance and SLAs
  • Ensure production reliability and stability of automation systems, including:
    • Monitoring workflow success/failure rates and execution latency
    • Tracking integration and API health, errors, and retry behavior
    • Implementing logging, alerting, and observability across automation pipelines
  • Continuously optimize workflows based on data, feedback, and operational performance to ensure consistent 24/7 MDR operation


Requirements

  • 4+ years of experience in Security Operations, MDR, Incident Response, or Security Engineering
  • 2-3+ years of hands-on experience with SOAR platforms and security automation
  • Proven experience owning and operating production-grade automation workflows in a SOC/MDR environment
  • Strong understanding of SOC operations, alert triage, escalation workflows, and incident response
  • Experience with enterprise security technologies (SIEM, SOAR, EDR/XDR, IAM/AD)
  • Strong scripting/development skills (Python, PowerShell, Bash) and experience building APIs and integrations
  • Experience with CI/CD, version control (Git), and deploying automation at scale
  • Strong analytical thinking and problem-solving skills with the ability to translate complex workflows into automation
  • Excellent communication and collaboration skills across engineering and operations teams


Nice to Have

  • Experience with AI-enhanced automation or large-scale workflow orchestration
  • Experience in high-volume MDR/SOC environments
  • Familiarity with threat hunting or detection engineering

What Success Looks Like

  • Increased automation coverage across MDR workflows
  • Measurable reduction in analyst workload and response times
  • Improved consistency and quality of incident response
  • Stable, reliable automation systems operating at scale

We invite you to check out our Instagram Page to gain further insight into the Varonis culture!

@VaronisLife

Varonis is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristic
#LI-Hybrid


What Varonis employees say

Pay

Hours and flexibility

Workplace

Get the full story on Breakroom